Healthcare Organizations Lose 20% of their Sensitive Data in Every Ransomware Attack, Reports Rubrik Zero Labs - Seite 2

Healthcare Far Surpasses the Global Average in Sensitive Data

• Rubrik observed that healthcare organizations secure 22% more data than the global average.
• A typical healthcare organization saw their data estate grow by 27% last year.
• A typical healthcare organization has more than 42 million sensitive data records — 50% more sensitive data than the global average of 28 million.
• Sensitive data records in observed healthcare organizations grew by more than 63% in 2023 — far surpassing any other industry and more than five times the global average (13%).

Ransomware Produces Outsized Impacts Against Healthcare

• Ransomware attacks against observed healthcare organizations have an estimated impact of almost five times more sensitive data than the global average.
• This equates to an estimated 20% of a typical healthcare organization's total sensitive data holdings impacted every time there is a successful ransomware encryption event, compared to 6% for an average organization.
• Virtualization really matters for healthcare and ransomware: 97% of all encrypted data in Rubrik observed healthcare organizations last year occurred within virtualized architecture compared to 83% across all industries.

As Cloud Becomes More Widely Adopted, New Security Blind Spots Emerge

• Organizations are becoming more dependent on the cloud. In 2023, Rubrik observed that cloud architecture stored 13% of an organization’s data, compared to 9% in 2022. Comparatively, on-premises declined from 77% in 2022 to 70% in 2023.
• Of the external organizations victimized in a cyberattack in 2023, many were attacked across multiple aspects of their hybrid environment with 67% of attacks impacting SaaS data, 66% for the cloud, and 51% for on-premises locations.
• The cloud comes with inherent risk based on security blind spots and vulnerable sensitive data, according to Rubrik Telemetry:
  • Blind spot #1: 70% of all data in a typical cloud instance is object storage, which typically has a far lower security coverage compared to other areas.
  • Blind spot #2: 88% of all data in object storage is not confirmed as machine readable or covered by prominent security technologies and services.
  • Blind spot #3: More than 25% of object storage data is subject to regulatory or legal requirements, such as protected health information (PHI) and personally identifiable information (PII).

Ransomware Continues to Wreak Havoc across Organizations — and IT and Security Teams