Insight and opinion from The National’s editorial leadership
September 04, 2024
Half a century ago, selling non-medical technology to hospitals was a tough job. In 1970, only 40 per cent of US hospitals had computer systems. Physicians often expressed a fear that computers were cumbersome and unreliable, doing more harm than good.
Yet the arguments for adoption were obvious enough. Back then, up to a third of the average American hospital bill was attributable to inefficient information handling, and the US public health agency complained as many as half of hospital chemistry tests were inaccurate because of “pencil and paper” errors like messy handwriting and shoddy arithmetic.
The digitalisation of the medical sector since then is one of the greatest advancements in health care of the past century; computer systems are a critical component of modern hospitals around the world.
But with new capabilities come new vulnerabilities. Hospitals, by way of their computer systems, have in recent years become the targets of crime. One common form, the ransomware attack, involves criminal gangs hacking into hospital records to steal private patient data and threatening to release it if they don’t receive payment. An investigation by The National published this week lays bare the activities of one such group based in Russia, known as Qilin.
Qilin has carried out dozens of ransomware attacks around the world in just the past two years. Many of the targets are in the healthcare sector.
Cyber security is an increasingly difficult task, and preventative cyber security is an almost Sisyphean one. Hacks and data breaches are becoming almost par for the course for any organisation with reputation and a computer – from utility companies in Serbia to banks in Bangladesh. If a system is upgraded, it is usually a matter of time before hackers find a workaround. The “internet of things” – the growing prevalence of everyday objects endowed with a WiFi signal – only raises the number of access routes for cyber criminals into our lives.
Data breaches are becoming almost par for the course for any organisation with reputation and a computer
Hospitals are a uniquely attractive target because the victims, sick patients, are especially vulnerable and their data especially intimate. And the consequences can go far beyond data protection; an attack on a pathology services firm in the UK in January led to cancer patients having their surgeries delayed. The ruthlessness of these kinds of attacks led one former FBI counter-terrorism leader to tell The National they should be classified as “a form of terrorism”.
Taking a national-security approach towards healthcare cyber attacks may be warranted. Hospitals and even many medical service providers could reasonably be considered part of a country’s critical infrastructure; when their operations are compromised, the impact can be wide-ranging and deadly. That means governments should be pro-active in protecting them and devote sufficient investment in their cyber security, with comparable priority to any other vital national asset.
But measures should be taken to make the private healthcare sector more resilient, too. Companies must foster a culture of patient care extending to patient data, and an understanding that powerful software is just as important as fancy hardware, even if donors and patients never see it. They must also include cyber-security staff in their payroll, if they haven’t already, and train medical staff in basic IT security awareness.
The UAE is a leading nation in implementing cyber-security controls, particularly with the Cyber Security Council setting up partnerships to enhance resilience across the healthcare sector. Abu Dhabi’s Department of Health implements an "Abu Dhabi Healthcare information and Cyber Security Standard" across all healthcare entities, with clear mandates.
Long gone are the days when healthcare professionals feared computers. It is right to ensure those days never return.
Investors: Three founders (two silent co-founders) and one venture capital fund
How to vote
Canadians living in the UAE can register to vote online and be added to the International Register of Electors.
They'll then be sent a special ballot voting kit by mail either to their address, the Consulate General of Canada to the UAE in Dubai or The Embassy of Canada in Abu Dhabi
Registered voters mark the ballot with their choice and must send it back by 6pm Eastern time on October 21 (2am next Friday)
When: The one-off Test starts on Friday, May 11 What time: Each day’s play is scheduled to start at 2pm UAE time. TV: The match will be broadcast on OSN Sports Cricket HD. Subscribers to the channel can also stream the action live on OSN Play.
There are direct flights from Dubai to Sofia with FlyDubai (www.flydubai.com) and Wizz Air (www.wizzair.com), from Dh1,164 and Dh822 return including taxes, respectively.
The trip
Plovdiv is 150km from Sofia, with an hourly bus service taking around 2 hours and costing $16 (Dh58). The Rhodopes can be reached from Sofia in between 2-4hours.
The trip was organised by Bulguides (www.bulguides.com), which organises guided trips throughout Bulgaria. Guiding, accommodation, food and transfers from Plovdiv to the mountains and back costs around 170 USD for a four-day, three-night trip.
Founders: Mostafa Kandil, Ahmed Sabbah and Mahmoud Nouh
Based: Cairo, Egypt
Sector: transport
Size: 450 employees
Investment: approximately $80 million
Investors include: Dubai’s Beco Capital, US’s Endeavor Catalyst, China’s MSA, Egypt’s Sawari Ventures, Sweden’s Vostok New Ventures, Property Finder CEO Michael Lahyani
The 12 Syrian entities delisted by UK
Ministry of Interior Ministry of Defence General Intelligence Directorate Air Force Intelligence Agency Political Security Directorate Syrian National Security Bureau Military Intelligence Directorate Army Supply Bureau General Organisation of Radio and TV Al Watan newspaper Cham Press TV Sama TV
