site logo

Cybersecurity

Note from the editor

Health systems and medical device manufacturers have become more engaged participants in cybersecurity out of necessity.

Ransomware attacks and data breaches have emerged as common realities with devastating, expensive consequences. Historically, hospitals' vulnerabilities have largely only gotten patched once they've been exposed by bad actors.

Individual medical devices — anything from a hospital bed to a pacemaker or an insulin pump — can also be vulnerable to tampering, with the potential to cause life-threatening scenarios for users. A health system's unique mix of newer devices and legacy technologies can further complicate challenges.

The meaning of being "proactive" will continue to change as tech-based threats evolve and the private sector improves safety and information sharing practices. We hope this ongoing look at how the medtech industry, Congress, HHS and independent experts are shaping cybersecurity will serve as a useful snapshot of where device safety is headed in the age of digital connectivity.

Maria Rachal
Associate Editor, MedTech Dive
E-mail | Twitter

What's in a connected medical device? Cybersecurity regulators want to know

Cybersecurity experts say mandating a "bill of materials" of medical device components would increase patient safety, but there are challenges to creating them.

Cybersecurity priorities laid out by key House panel

FDA deficient on device cybersecurity readiness, watchdog says

Gap between perception, reality of connected medical device security, survey finds

FDA boosts medical device cybersecurity coordination with Homeland Security

HHS opens cybersecurity coordination center after troubled year

1 in 5 health IT execs say malware has hit devices

Industry balks at FDA's cybersecurity plans

The proposals come as healthcare organizations are pressing manufacturers to more aggressively support the security of legacy medical devices.

Vital signs can be tampered on hospital networks, McAfee cyber report suggests

Better cybersecurity safeguards urged for medical devices, EHRs