How long does it take to recover from ransomware?

47% of healthcare organizations could recover within a week, down from 54% the previous year.

What is the main cause of ransomware attacks?

Compromised credentials remain the primary cause, followed by exploits, underlining the need for robust access controls and network security.

What does Sophos recommend to defend against ransomware?

Comprehensive security tools, Zero Trust Network Access (ZTNA) to prevent credential abuse, adaptive technologies for automated attack response, and 24/7 threat detection and response, either in-house or through Managed Detection and Response (MDR) services.

Ransomware: A Growing Threat to Dental Practices

Q: How common is ransomware in healthcare?

According to the Sophos State of Ransomware in Healthcare 2023 report, data was encrypted in 75% of successful ransomware attacks on healthcare organizations, the highest rate in three years, and 61% of healthcare organizations experienced a data encryption event in 2022.

In the evolving landscape of cyber threats, ransomware attacks have emerged as a significant concern for the healthcare industry, particularly for dental practices. The latest report from Sophos, The State of Ransomware in Healthcare 2023, underscores this escalating challenge.

75%

Of successful attacks

Resulted in data encryption at healthcare organizations, the highest rate recorded in the past three years

01The rising tide of ransomware in healthcare

Direct answerSuccessful ransomware attacks on healthcare organizations are rising, with data encryption in 75% of incidents and 61% of organizations experiencing an encryption event in 2022.

The Sophos report reveals a startling increase in successful ransomware attacks on healthcare organizations, with data encryption occurring in 75% of these incidents, the highest rate recorded in the past three years. Dental practices, being part of this sector, face unique vulnerabilities due to the nature of their data and systems.

The survey, encompassing 3,000 IT and cybersecurity professionals across various sectors, including 233 from healthcare, highlights a worrying trend. In 2022, 61% of healthcare organizations experienced a data encryption event, marking a significant rise from previous years.

Metric	Previous year	Latest report
Attacks interrupted before data encryption	34%	24%
Organizations that recovered within a week	54%	47%

02Dental practices at risk

Direct answerFewer healthcare organizations are stopping attacks before encryption, and recovery is taking longer, which means more downtime for patient care.

For dental practices, the implications are dire. Only 24% of healthcare entities could interrupt a ransomware attack before data encryption, a decrease from 34% in the previous year. This diminishing success rate indicates a growing gap in cybersecurity measures within the sector.

Chester Wisniewski of Sophos points out the complexity of modern ransomware threats. He emphasizes the need for healthcare organizations, especially dental practices, to adopt a more dynamic approach to cybersecurity, moving beyond prevention to continuous monitoring and response.

The report also highlights an increase in recovery time post-attack. While 47% of healthcare organizations could recover within a week, this is a decline from 54% last year. For dental practices, this prolonged downtime can have serious implications for patient care and business continuity.

03Key findings for dental practices

Direct answerAttacks increasingly involve data theft, compromised credentials are the primary cause, and fewer healthcare organizations are paying ransoms.

Ransomware attacks are increasingly involving data theft, a tactic known as the "double dip" method.
Compromised credentials remain the primary cause of these attacks, followed by exploits, underlining the need for robust access controls and network security.
There is a silver lining: the percentage of healthcare organizations opting to pay ransoms has decreased, indicating a shift towards stronger defense mechanisms.

04Sophos' recommendations

Direct answerComprehensive security tools, Zero Trust Network Access, adaptive automated response, and 24/7 threat detection and response.

Comprehensive security tools

Defend against common attack vectors.

Zero Trust Network Access

Adopt ZTNA to prevent credential abuse.

Adaptive technologies

Use automated attack response.

24/7 detection and response

In-house or through Managed Detection and Response (MDR) services.

Action steps for dental practices

1
Back up and rehearseRegularly back up data and practice recovery procedures.
2
Maintain security hygieneKeep up with timely software updates and security tool reviews.

The bottom line

The rise in ransomware attacks presents a clear and present danger to the dental sector. As the leader of Darkhorse Tech, I urge dental practices to recognize these threats and adopt a proactive, layered security approach to protect their patients, data, and operations.

Build a layered defense

Darkhorse Tech helps dental practices put proactive, layered security in place, from backups and patching to 24/7 detection and response.

Reuben Kamp

CEO & Founder, Darkhorse Tech