According to the FBI’s 2023 Internet Crime Report, published in March 2024, attacks on the healthcare sector have increased more than any other sector. Ransomware attacks, in particular, surged by 130% in 2023.
Microsoft Partners with White House and Healthcare Associations to Combat Cyber Threats
On Monday, June 10, Microsoft announced a new cybersecurity program aimed at supporting rural hospitals serving over 60 million Americans. This initiative addresses the exponential growth of cyberattacks threatening access to healthcare and aims to provide enterprise-quality cybersecurity to vulnerable rural hospitals. This collaboration involves The White House, the American Hospital Association, and the National Rural Health Association (NRHA).
Alan Morgan, CEO of the NRHA, stated, “Rural hospitals face unique challenges in cybersecurity, balancing limited resources with the increasing sophistication of cyber threats. This important partnership with Microsoft will help ensure that rural hospitals are prepared to meet this rising threat.”
The program aims to deliver cybersecurity services through trusted Microsoft partners, provide additional cybersecurity training to local community colleges, and create jobs through the TechSpark program.
Valkyries’ Information Security Joins the Fight
As a trusted Microsoft partner specializing in cybersecurity for health organizations, Valkyries’ Information Security is participating in the program to help protect rural healthcare.
“My family and I live in a rural area,” said Valkyries’ InfoSec co-owner Paul Hendricksen. “When my son got sick, he had to be airlifted to Denver Children’s. We were driving back and forth to Denver for nearly a month. The medical bills, the gas, it hits hard. We understand first-hand the burden this issue places on rural communities, and we’re going to do everything we can to help ensure you can live in a rural area, and still have access to secure, high-quality healthcare.”
Why Target Rural Healthcare?
Rural hospitals are particularly vulnerable to cyberattacks due to their limited resources. They are often the only source of medical care for miles, making them critical to their communities. In the post-COVID era, healthcare is increasingly digital, from online booking and medical record storage to diagnostic results and payment systems. This digital dependence makes rural hospitals attractive targets for cybercriminals. Unlike the current situation in London, as the National Health System is still recovering from a ransomware attack, rural healthcare agencies are more likely to pay ransoms to continue operations.
Because they have no other choice.
Understanding the Rural Problem
Consider a scenario in La Junta, CO, where Ark Valley Hospital is only a Level IV Trauma Center. This means that for more severe trauma cases – like the common scenario of a farmer getting his hand caught in his combine – patients must be transferred to higher-level centers, such as UC Health Parkview, a Level III Trauma Center in Pueblo (an hour away) or the Level I Trauma Center at UC Health Memorial Hospital in Colorado Springs (two hours away).
UC Memorial is the only Level I Trauma Center outside of Denver. This single hospital covers a service area from Colorado Springs to the eastern Kansas border (approx. 483 miles), the New Mexico border (approx. 383 miles) in the south, and the Utah border in the west (approx. 607 miles). This covers a service area comprising approximately 418,000 square miles, representing more than 541,000 Coloradans – all responding to one Level I Trauma Center. The lack of nearby comprehensive trauma care places incredible strain on rural healthcare systems.
The 2019 age-adjusted natural-cause mortality rate for the working age population (aged 25-54) was 43% higher in rural areas than urban. Translation: you’re almost 50% more likely to die “in your prime” in a rural area because of a lack of access to quality healthcare.
The Importance of Distance
Distance significantly affects the level of healthcare rural citizens can access. Traveling an hour or more for an appointment can be cost-prohibitive, leading more patients to opt for digital services like telehealth. However, this increase in digital services also expands the attack surface for cybercriminals. The cost of unraveling and remediating a healthcare record breach is estimated at $418 per person, making such breaches potentially catastrophic for rural hospitals.
Rural Healthcare as Prime Targets
Rural healthcare facilities are prime targets for cyberattacks due to their critical role in providing access to medical services and their limited resources. Urban healthcare agencies are typically better prepared for cyber threats, while rural facilities often lack the funding and expertise to implement strong cybersecurity measures. This lack of preparation makes them more likely to pay ransoms, flagging them for future attacks.
When cyberattacks hit rural areas, they can permanently close hospitals, leaving thousands without even intermediary access to essential health services, putting more lives at risk.
