Budapest, 6 November, 2024
This year, the European Union Agency for Cybersecurity (ENISA) organises the 9th edition of the eHealth Security conference, in collaboration with the National Cybersecurity Centre of Hungary and Semmelweis University. The full-day ENISA event was hosted this year in Budapest and provided a unique opportunity for the stakeholder community to explore recent developments in the field, challenges and pathways forward.
The rising digitalisation and interconnectedness in healthcare has significantly increased the sector’s exposure to cyber threats and raised concerns regarding medical data being targeted by cybercrime. According to the 2024 ENISA Threat Landscape report, 487 incidents out of the total reported incidents analysed refer to the health sector, with 45% of them being ransomware attacks and 28% being data breaches.
Highlighted by the recent regulatory developments, such as the NIS2 transposition and the forthcoming European Health Data Space (EHDS), cybersecurity in the health sector and issues surrounding health data sharing have gained prominence. The subject was further emphasised in the political guidelines set for the European Commission 2024-2029, which commit the new Commission to developing a European action plan for the cybersecurity of hospitals and healthcare providers.
In this context, presentations, along with expert sessions reflecting on EU Member States national perspectives invited participants to further engage in discussions on the evolving health cybersecurity landscape and related challenges and opportunities. This exchange of valuable insights aimed to advance efforts to fortify the sector’s public and private entities against cyber threats.
Further information
9th ENISA eHealth Security Conference — ENISA
Health Threat Landscape — ENISA
Health Threat Landscape
Download
PDF document, 1.42 MB
This is the first analysis conducted by the European Union Agency for Cybersecurity (ENISA) of the cyber threat landscape of the health sector in the EU. The report aims to bring new insights into the reality of the health sector by mapping and studying cyber incidents from January 2021 to March 2023. It identifies prime threats, actors, impacts and trends based on the analysis of cyberattacks targeting health organisations over a period of more than 2 years.
Published: July 05, 2023