Connect with us

Telecom

75% of Healthcare Organizations Fall for Ransomware Attacks – Sophos Report

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, on Thursday shared its sector survey report, “The State of Ransomware in Healthcare 2023,” which revealed that, among those organizations surveyed, cybercriminals successfully encrypted data in nearly 75% of ransomware attacks.

This is the highest rate of encryption in the past three years and a significant increase from the 61% of healthcare organizations that reported having their data encrypted last year.

In addition, only 24% of healthcare organizations were able to disrupt a ransomware attack before the attackers encrypted their data—down from 34% in 2022; this is the lowest rate of disruption reported by the sector over the past three years.

“To me, the percentage of organizations that successfully stop an attack before encryption is a strong indicator of security maturity. For the healthcare sector, however, this number is quite low—only 24%. What’s more, this number is declining, which suggests the sector is actively losing ground against cyberattackers and is increasingly unable to detect and stop an attack in progress.

“Part of the problem is that ransomware attacks continue to grow in sophistication, and the attackers are speeding up their attack timelines. In the latest Active Adversary Report for Tech Leaders, we found that the median time from the start of a ransomware attack to detection was only five days. We also found that 90% of ransomware attacks took place after regular business hours.

“The ransomware threat has simply become too complex for most companies to go at it alone. All organizations, especially those in healthcare, need to modernize their defensive approach to cybercrime, moving from being solely preventative to actively monitoring and investigating alerts 24/7 and securing outside help in the form of services like managed detection and response (MDR),” said Chester Wisniewski, director, field CTO, Sophos.

Additional key findings from the report include:

·       In 37% of ransomware attacks where data was successfully encrypted, data was also stolen, suggesting a rise in the “double dip” method

·       Healthcare organizations are now taking longer to recover, with 47% recovering in a week, compared to 54% last year

·       The overall number of ransomware attacks against healthcare organizations surveyed declined from 66% in 2022 to 60% this year

·       Compromised credentials were the number one root cause of ransomware attacks against healthcare organizations, followed by exploits

·       The number of healthcare organizations surveyed that paid ransom payments declined from 61% last year to 42% this year. This is lower than the cross-sector average of 46%

 “In 2016, the Red Cross Hospital of Córdoba in Spain suffered a ransomware attack that reached servers and encrypted hundreds of files, medical records and other important patient information. It was a major disruption to our operations and interfered with our ability to care for our patients.

“The stakes are high in ransomware attacks against healthcare organizations—and attackers know that—meaning we’ll always be a target. After this ransomware attack, we worked hard with Tekpyme to bolster our defenses, and now we have reduced our incident response time by 80%.

“I think the industry as a whole is making improvements, but there is still work to do, because of the constantly changing nature of cybercrime.

“Hopefully healthcare organizations can leverage the help that is available from security vendors such as Sophos to prevent a very real ‘threat to life’ if systems go offline due to a ransomware attack,” said José Antonio Alcaraz Pérez, head of information systems and communications at Cruz Red Andalusia in Spain.

“Cyberspace today is ripe with technically sophisticated actors looking for vulnerabilities to exploit. What all this translates to is a multidimensional cyberthreat of actors who have the tools to paralyze entire hospitals. Partnering with the private sector is critical to our mission. The information [they] share has real-world impacts and can save real businesses and real lives,” said Christopher Wray, FBI Director.

Sophos recommends the following best practices to help defend against ransomware and other cyberattacks:

·       Strengthen defensive shields with:

o   Security tools that defend against the most common attack vectors, including endpoint protection with strong anti-ransomware and anti-exploit capabilities

o   Zero Trust Network Access (ZTNA) to thwart the abuse of compromised credentials

o   Adaptive technologies that respond automatically to attacks, disrupting adversaries and buying defenders time to respond

o   24/7 threat detection, investigation and response, whether delivered in-house or by a specialized Managed Detection and Response (MDR) provider

·       Optimize attack preparation, including regularly backing up, practicing recovering data from backups and maintaining an up-to-date incident response plan

·       Maintain security hygiene, including timely patching and regularly reviewing security tool configurations

 To learn more about the State of Ransomware in Healthcare 2023, download the full report from Sophos.com.

The State of Ransomware 2023 survey polled 3,000 IT/cybersecurity leaders in organizations with between 100 and 5,000 employees, including 233 from the healthcare sector, across 14 countries in the Americas, EMEA and Asia Pacific.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

FG Taps Quest Merchant Bank for Advisory on 90,000km Fibre Project

Published

on

Kindly share this post

Quest Merchant Bank has been appointed as Transaction Advisor for Project BRIDGE, a broadband infrastructure initiative of the Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE), led by Bosun Tijani, the minister.

FG Taps Quest Merchant Bank for Advisory on 90,000km Fibre Project

Project BRIDGE, short for Broadband Infrastructure Development for Digital Economy, is designed to deepen Nigeria’s digital backbone through the deployment of about 90,000 kilometres of open-access fibre-optic cables nationwide.

The initiative is expected to boost broadband penetration, strengthen connectivity and drive inclusive economic growth.

Under the mandate, Quest Merchant Bank will work with the ministry and the Project Implementation Unit to structure the project’s financial and commercial framework.

This includes developing bankable investment models, engaging investors and designing a public-private partnership structure to ensure efficient execution and sustainability.

Afolabi Olorode, acting managing director, described the project as a critical intervention for Nigeria’s digital economy.

“Project BRIDGE represents a critical step in strengthening Nigeria’s digital backbone and unlocking the immense opportunities within the country’s digital economy. We are honoured to partner with the FMCIDE under the leadership of Honourable Minister, Dr Bosun Tijani on this important initiative,” he said.

He added that the bank would leverage its expertise in infrastructure finance to develop “a robust and investable framework that will attract private capital and support long-term national development.”

Also speaking, Yetunde Falore, head of Investment Banking at Quest Merchant Bank, said the project comes at a defining moment for Nigeria’s digital economy.

“Nigeria’s digital economy is entering a defining phase, and infrastructure initiatives such as Project BRIDGE will play a central role in expanding connectivity, deepening digital inclusion, and supporting sustainable economic growth,” she stated.

Falore noted that the bank would focus on ensuring the timely and efficient delivery of the project in its advisory role.

The initiative aligns with the Renewed Hope agenda of President Bola Ahmed Tinubu, which prioritises digital infrastructure expansion and private sector participation in critical national assets.


Kindly share this post
Continue Reading

Telecom

Court Bans Kenyan Telcos from Recycling SIM Cards

Published

on

Kindly share this post

Kenya’s High Court has ruled that mobile phone numbers are not disposable assets, but constitutionally protected digital identifiers, striking at the core of a long-standing industry practice of arbitrarily reassigning inactive SIM cards without the owners’ consent.

Court Bans Kenyan Telcos from Recycling SIM Cards

In a landmark decision that could reshape telecom regulation and digital identity frameworks across Africa, sitting at Milimani Law Courts in Nairobi, Justice Lawrence Mugambi declared that reassigning a phone number without the original owner’s consent violates the right to privacy.

The ruling effectively elevates a SIM card into the same legal category as personal data tied to an individual’s private life.

At the heart of the ruling is Article 31 of the Constitution, which safeguards citizens from unnecessary disclosure of private information and interference with communications.

The court found that in today’s digital economy, a registered mobile number functions as a critical gateway to sensitive personal data, linking users to mobile money platforms like M-PESA, banking systems, email accounts, and social media profiles.

“When mobile digital identity is lost through reallocation or recycling without interrogating the reasons behind inactivity, it creates an avenue for unauthorised disclosure of delicate information,” the judgment stated.

The case, brought by Erastus Ngura Odhiambo, petitioner and former prisoner, challenged the routine telecoms practice of deactivating SIM cards after prolonged inactivity and reassigning them to new users.

Odhiambo lost access to his mobile phone number due to inactivity while serving his lengthy sentence.

He argued that the practice exposes individuals to serious risks, including misdirected financial transactions, intercepted one-time passwords, and unintended access to private communications.

The court agreed, highlighting how recycled numbers can result in strangers receiving confidential messages, authentication codes, and even being added to private messaging groups, effectively inheriting fragments of another person’s digital life.

Justice Mugambi also criticised the rigidity of SIM deactivation policies, calling them “arbitrary” for failing to consider legitimate reasons for inactivity such as incarceration, studying in restricted environments, or living abroad.

“Incarceration does not strip an individual of their constitutional rights to privacy and identity,” he noted.

For telecom operators, including Safaricom, the ruling introduces a significant compliance burden. The court outlined three strict conditions before any number can be reassigned.

Telcos must obtain informed and verifiable consent from the original owner, issue a public notice and conduct traceability efforts over a reasonable period.

More importantly, the court further directed that telecoms firms must implement technical safeguards to prevent data exposure to the new user.

The Office of the Attorney General has been given six months to translate these directives into enforceable regulations.

 


Kindly share this post
Continue Reading

Telecom

Binance Earn: Simple Way to Earn Rewards on Idle Crypto Holdings

Published

on

Kindly share this post

Binance Earn offers cryptocurrency users an accessible way to generate rewards on idle digital assets without active trading or constant market monitoring.

Binance Earn: Simple Way to Earn Rewards on Idle Crypto Holdings

Binance Earn

As the crypto market matures, more holders seek productive uses for their assets rather than leaving them dormant in wallets. Binance addresses this through Binance Earn, where users allocate supported cryptocurrencies to various reward products for automatic yield generation.

The platform emphasises simplicity with a “set-and-forget” model: users select assets, pick a product, and rewards accrue passively in the background. This appeals especially to long-term holders aiming to enhance portfolio value over time without day-to-day involvement.

Binance Earn provides flexible options for instant liquidity access alongside fixed-term products for defined commitments, catering to diverse strategies and risk appetites.

“We’re seeing growing interest across Africa in ways to make crypto holdings more productive without active trading,” said Larry Cooke, Africa Head of Legal at Binance. “Simple, ‘set-and-forget’ solutions are becoming increasingly relevant as more users take a longer-term approach to digital assets.”

The feature reflects shifting user behaviour towards holding and gradual growth amid volatile markets, where reward rates fluctuate based on conditions, liquidity, and structures.

Users must assess risks and alignment with personal goals, as crypto remains volatile. Binance Earn positions itself as a key tool in Africa’s rising digital asset adoption, enabling hands-off participation in the ecosystem.


Kindly share this post
Continue Reading

Trending