![BMO Commercial Banking](https://commercial.bmo.com/static/img/BMO-ca-logo.jpg)
Cyberattacks on Health Systems are on the Rise: How to mitigate tech-related risks
-
bookmark
-
print
![Electronic technologies.](https://commercial.bmo.com/media/filer_public/6a/42/6a422db0-4d79-4940-9aa0-a3c037671dab/istock-1370569748_0_71_1254_764.jpg)
- Keywords:
![Electronic technologies](https://commercial.bmo.com/media/filer_public/6a/42/6a422db0-4d79-4940-9aa0-a3c037671dab/istock-1370569748_0_71_1254_764.jpg)
![Electronic technologies](https://commercial.bmo.com/media/filer_public/6a/42/6a422db0-4d79-4940-9aa0-a3c037671dab/istock-1370569748_0_71_1254_764.jpg)
Technology is revolutionizing the healthcare industry in several ways. From electronic charts to billings and collections, digital tools are ubiquitous. Meanwhile, data analytics is becoming a crucial tool for improving both operational decisions and the patient experience.
However, with the rise of technology comes concerns about financial, physical, internet, and data security. There have been multiple instances of major healthcare systems suffering ransomware attacks. Along with disrupting services, breaches to health systems often impact sensitive data. Once healthcare system breaches are discovered, it often turns out that a lack of strict policy enforcement is to blame.
As healthcare systems become increasingly digitized and interconnected, ensuring the security of patient data becomes paramount. The recent Change Healthcare cyberattack serves as a stark reminder of the vulnerabilities present in healthcare IT systems.
Given the high stakes involved, healthcare organizations must prioritize robust cybersecurity measures, including safeguarding financial assets, protecting physical infrastructure, and fortifying defenses against cyber threats. In many cases, working with a strong financial partner can help healthcare systems mitigate those risks.
Cybersecurity best practices
Implementing stringent security protocols, encryption techniques, and access controls are imperative to safeguard sensitive patient information from unauthorized access or malicious attacks. Moreover, investing in cybersecurity training and awareness programs for staff is essential to mitigate human error, which remains a significant factor in data breaches.
Discuss how your organization can access the tools it requires to continue to manage its financial operations during a cybersecurity incident. This includes:
-
Outlining the procedures for processing critical financial transactions (i.e., payroll, tax, and debt service payments) in the absence of access to the internet, email, phone systems, your organization’s enterprise resource planning (ERP) software, or your treasury management system
-
Ensure you have established multiple ways to access your banking services under emergency protocols. This may include accessing bank platforms from various geographic locations, nonstandard IP addresses, and alternate callback numbers.
Your banking partner should work with your organization to ensure all profiles for these alternate protocols are updated. Knowing which staff members have the authority to initiate and authorize requests over the phone or in writing can save valuable time in emergency situations.
Other best practices a financial partner would recommend include conducting regularly scheduled reviews of your deposit accounts, and implementing fraud prevention tactics to ensure vulnerabilities are identified and closed on a routine basis. These reviews also help ensure your finance and IT staffs are educated on the industry best practices for protecting your data and funds.
Take swift action
Should your organization find itself in a cybersecurity incident, it’s critical to notify your banking partner immediately to advise them of the situation. This helps you quickly take the necessary action to prevent further damage. Full transparency regarding the severity of the attack and what information may be compromised will allow the bank to assist in monitoring your accounts for suspicious activity and fraudulent transactions.
By prioritizing cybersecurity, healthcare organizations can ensure patient trust, maintain regulatory compliance, and safeguard the integrity and confidentiality of healthcare data in an increasingly digital landscape. Partnering with a financial institution with expertise in financial crimes, information security, and cybersecurity is vital to developing the appropriate processes and fraud mitigation strategies. Working closely with your financial institution to build a security plan (and keep it current) should a cyber event arise help keep your data and assets safe.
Marcos Vega & Mark Bockelmann
Marcos Vega, Director, BMO Commercial Bank & Mark Bockelmann, Treasury Consultant, BMO Treasury & Payment Solutions
Technology is revolutionizing the healthcare industry in several ways. From electronic charts to billings and collections, digital tools are ubiquitous. Meanwhile, data analytics is becoming a crucial tool for improving both operational decisions and the patient experience.
However, with the rise of technology comes concerns about financial, physical, internet, and data security. There have been multiple instances of major healthcare systems suffering ransomware attacks. Along with disrupting services, breaches to health systems often impact sensitive data. Once healthcare system breaches are discovered, it often turns out that a lack of strict policy enforcement is to blame.
As healthcare systems become increasingly digitized and interconnected, ensuring the security of patient data becomes paramount. The recent Change Healthcare cyberattack serves as a stark reminder of the vulnerabilities present in healthcare IT systems.
Given the high stakes involved, healthcare organizations must prioritize robust cybersecurity measures, including safeguarding financial assets, protecting physical infrastructure, and fortifying defenses against cyber threats. In many cases, working with a strong financial partner can help healthcare systems mitigate those risks.
Cybersecurity best practices
Implementing stringent security protocols, encryption techniques, and access controls are imperative to safeguard sensitive patient information from unauthorized access or malicious attacks. Moreover, investing in cybersecurity training and awareness programs for staff is essential to mitigate human error, which remains a significant factor in data breaches.
Discuss how your organization can access the tools it requires to continue to manage its financial operations during a cybersecurity incident. This includes:
-
Outlining the procedures for processing critical financial transactions (i.e., payroll, tax, and debt service payments) in the absence of access to the internet, email, phone systems, your organization’s enterprise resource planning (ERP) software, or your treasury management system
-
Ensure you have established multiple ways to access your banking services under emergency protocols. This may include accessing bank platforms from various geographic locations, nonstandard IP addresses, and alternate callback numbers.
Your banking partner should work with your organization to ensure all profiles for these alternate protocols are updated. Knowing which staff members have the authority to initiate and authorize requests over the phone or in writing can save valuable time in emergency situations.
Other best practices a financial partner would recommend include conducting regularly scheduled reviews of your deposit accounts, and implementing fraud prevention tactics to ensure vulnerabilities are identified and closed on a routine basis. These reviews also help ensure your finance and IT staffs are educated on the industry best practices for protecting your data and funds.
Take swift action
Should your organization find itself in a cybersecurity incident, it’s critical to notify your banking partner immediately to advise them of the situation. This helps you quickly take the necessary action to prevent further damage. Full transparency regarding the severity of the attack and what information may be compromised will allow the bank to assist in monitoring your accounts for suspicious activity and fraudulent transactions.
By prioritizing cybersecurity, healthcare organizations can ensure patient trust, maintain regulatory compliance, and safeguard the integrity and confidentiality of healthcare data in an increasingly digital landscape. Partnering with a financial institution with expertise in financial crimes, information security, and cybersecurity is vital to developing the appropriate processes and fraud mitigation strategies. Working closely with your financial institution to build a security plan (and keep it current) should a cyber event arise help keep your data and assets safe.
What to Read Next.
U.S.-Canada Trade Tallies and Tussles
Michael Gregory, CFA | July 17, 2024 | Economic Insights
![Canada and United States two flags](https://commercial.bmo.com/media/filer_public/5a/61/5a615c86-894b-486d-9afe-b4c991cbdf34/us_canada_flags_istock-1089423322_0_9_2700_1500.jpg)
On June 14, the final edge girders connecting the two sides of the deck of the Gordie Howe International Bridge were put in place. The six-lane bridg…
Continue Reading>More Insights
Tell us three simple things to
customize your experience.
![How we can help](https://commercial.bmo.com/media/filer_public/ef/77/ef770d21-7a65-4a56-8045-c9be3b8f4955/custom-search-image-1.jpg)
![How we can help](https://commercial.bmo.com/media/filer_public/93/17/9317551b-3fd3-4372-8078-31c2808ce1d6/2_women_talking_for_banker_widget_istock-677809868_cropped.jpg)
![How we can help](https://commercial.bmo.com/media/filer_public/ef/77/ef770d21-7a65-4a56-8045-c9be3b8f4955/custom-search-image-1.jpg)
![How we can help](https://commercial.bmo.com/media/filer_public/93/17/9317551b-3fd3-4372-8078-31c2808ce1d6/2_women_talking_for_banker_widget_istock-677809868_cropped.jpg)
![How we can help](https://commercial.bmo.com/media/filer_public/ef/77/ef770d21-7a65-4a56-8045-c9be3b8f4955/custom-search-image-1.jpg)
![How we can help](https://commercial.bmo.com/media/filer_public/93/17/9317551b-3fd3-4372-8078-31c2808ce1d6/2_women_talking_for_banker_widget_istock-677809868_cropped.jpg)
Commercial
Commercial
-
Who We Are
-
Industry Expertise
- Agribusiness & Protein
- Agriculture
- Dealer Finance
- Commercial Real Estate
- Correspondent Banking
- Educational Institutions
- Engineering & Construction
- Food & Beverage
- Franchise Finance
- Futures & Securities
- Governments
- Healthcare
- Manufacturing
- Metals
- Not-for-Profit Organizations
- Private Equity Sponsors
- Professional Services
- Retail & Wholesale Distribution
- Specialty Finance
- Trucking
- Dental Practices
- Fuel Services & Convenience
- Logistics, Rail and Shipping
- Technology Banking
- Wine & Spirits
- Religious Institution Banking
-
We Can Help
- Asset Based Lending
- Business Strategy
- Doing Business Internationally
- Economic Insights
- Equipment Finance
- Finance Growth
- Manage Cash Flow
- Manage Risk
- Wealth Management
- Corporate Advisory
- Doing Business in Canada
- Minority-Owned Businesses
- Mergers & Acquisitions
- Pacific Rim
- Climate Smart
- Regional Investment Banking Expertise
-
Our Bankers
- Our Podcasts
![phone hover icon](https://commercial.bmo.com/static/images/phone-hover.png)
![email hover icon](https://commercial.bmo.com/static/images/mail_hover%402x.png)
![phone hover icon](https://commercial.bmo.com/static/images/phone_hover%402x.jpg)
![email icon](https://commercial.bmo.com/static/images/mail_icon_circle_hover.png)
![phone icon](https://commercial.bmo.com/static/images/phone_icon_circle_hover.png)
![share icon](https://commercial.bmo.com/static/images/share_icon_circle_hover.png)
Contact Us
Banking products are subject to approval and are provided in the United States by BMO Bank N.A. Member FDIC. BMO Commercial Bank is a trade name used in the United States by BMO Bank N.A. Member FDIC. BMO Sponsor Finance is a trade name used by BMO Financial Corp. and its affiliates.
Please note important disclosures for content produced by BMO Capital Markets. BMO Capital Markets Regulatory | BMOCMC Fixed Income Commentary Disclosure | BMOCMC FICC Macro Strategy Commentary Disclosure | Research Disclosure Statements.
BMO Capital Markets is a trade name used by BMO Financial Group for the wholesale banking businesses of Bank of Montreal, BMO Bank N.A. (member FDIC), Bank of Montreal Europe p.l.c., and Bank of Montreal (China) Co. Ltd, the institutional broker dealer business of BMO Capital Markets Corp. (Member FINRA and SIPC) and the agency broker dealer business of Clearpool Execution Services, LLC (Member FINRA and SIPC) in the U.S. , and the institutional broker dealer businesses of BMO Nesbitt Burns Inc. (Member Canadian Investment Regulatory Organization and Member Canadian Investor Protection Fund) in Canada and Asia, Bank of Montreal Europe p.l.c. (authorised and regulated by the Central Bank of Ireland) in Europe and BMO Capital Markets Limited (authorised and regulated by the Financial Conduct Authority) in the UK and Australia and carbon credit origination, sustainability advisory services and environmental solutions provided by Bank of Montreal, BMO Radicle Inc., and Carbon Farmers Australia Pty Ltd. (ACN 136 799 221 AFSL 430135) in Australia. "Nesbitt Burns" is a registered trademark of BMO Nesbitt Burns Inc, used under license. "BMO Capital Markets" is a trademark of Bank of Montreal, used under license. "BMO (M-Bar roundel symbol)" is a registered trademark of Bank of Montreal, used under license.
® Registered trademark of Bank of Montreal in the United States, Canada and elsewhere.
™ Trademark of Bank of Montreal in the United States and Canada.
The material contained in articles posted on this website is intended as a general market commentary. The opinions, estimates and projections, if any, contained in these articles are those of the authors and may differ from those of other BMO Commercial Bank employees and affiliates. BMO Commercial Bank endeavors to ensure that the contents have been compiled or derived from sources that it believes to be reliable and which it believes contain information and opinions which are accurate and complete. However, the authors and BMO Commercial Bank take no responsibility for any errors or omissions and do not guarantee their accuracy or completeness. These articles are for informational purposes only.
This information is not intended to be tax or legal advice. This information cannot be used by any taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer. This information is being used to support the promotion or marketing of the planning strategies discussed herein. BMO Bank N.A. and its affiliates do not provide legal or tax advice to clients. You should review your particular circumstances with your independent legal and tax advisors.
Third party web sites may have privacy and security policies different from BMO. Links to other web sites do not imply the endorsement or approval of such web sites. Please review the privacy and security policies of web sites reached through links from BMO web sites.
Notice to Customers
To help the government fight the funding of terrorism and money laundering activities, federal law (USA Patriot Act (Title III of Pub. L. 107 56 (signed into law October 26, 2001)) requires all financial organizations to obtain, verify and record information that identifies each person who opens an account. When you open an account, we will ask for your name, address, date of birth and other information that will allow us to identify you. We may also ask you to provide a copy of your driver's license or other identifying documents. For each business or entity that opens an account, we will ask for your name, address and other information that will allow us to identify the entity. We may also ask you to provide a copy of your certificate of incorporation (or similar document) or other identifying documents. The information you provide in this form may be used to perform a credit check and verify your identity by using internal sources and third-party vendors. If the requested information is not provided within 30 calendar days, the account will be subject to closure.