Data Privacy can reduce attack surfaces

Data privacy is the practice of protecting data from unauthorized access, use, disclosure, disruption, modification, or destruction. It is a critical component of cybersecurity, as it helps to reduce the risk of data breaches and other cyberattacks.

Attack surfaces are the part of a system or network that are exposed to potential attack. By adopting data privacy measures, organizations can reduce the size of their attack surfaces and make it more difficult for attackers to gain access to their systems and data.

There are reasons why cybersecurity companies may not be focusing on complying with data privacy to reduce infiltration from hackers due to:

· Cost. Complying with data privacy regulations can be expensive, especially for small businesses. Cybersecurity companies may not be able to afford the cost of implementing and maintaining data privacy compliance programs.

· Complexity. Data privacy regulations are complex and can be difficult to understand and comply with. Cybersecurity companies may not have the expertise or resources to comply with these regulations.

· Focus on other priorities. Cybersecurity companies may be focused on other priorities, such as developing new security products and services or responding to customer incidents.

It is true that a renowned Asian hospital was recently crippled by a ransomware attack. The attack occurred in November 2022 and affected the hospital's IT systems, including its centralized records. The hospital was forced to operate many of its key medical services and labs manually, which disrupted patient care and caused significant delays.

When a renowned Asian hospital was crippled by a ransomware attack, the immediate focus shifted from patient care to a cyber-strategy discussion. The nightmare that ensued revealed vulnerabilities, stressed resources, and created a chaotic environment, compromising both patient data and trust.

This hospital is not alone. As an essential industry with troves of highly sensitive medical data, it is increasingly targeted by cyber criminals. In the first half of 2023, Check Point Research found that healthcare attacks increased 18% with healthcare organizations experiencing 1,634 cyber-attacks per week, on average. In fact, healthcare ranks as the third most attacked industry and the 5th most impacted industry by ransomware.

The ransomware attack is a reminder of the growing threat of cyberattacks on healthcare organizations. Healthcare organizations hold a large amount of sensitive patient data, which makes them a prime target for cybercriminals.

Ransomware attacks can have a devastating impact on healthcare organizations. They can disrupt patient care, damage reputations, and lead to financial losses. In some cases, ransomware attacks can even lead to deaths.

However, it is important to note that data privacy compliance is essential for cybersecurity. By complying with data privacy regulations, cybersecurity companies can reduce their risk of data breaches and other cyberattacks. This can help them to protect their customers' data and maintain their reputation as trusted security providers.

S Mohini Ratna, Editor, VARINDIA