Cybersecurity Vulnerabilities and Considerations in U.S. Healthcare Facilities: A Scoping Review

Robust cybersecurity measures are essential for business continuity of U.S. healthcare institutions which is to maintain care standards for all patients. Hackers seek to disrupt healthcare delivery for financial and political means, to disrupt services in retaliation, or simply for malicious intent (Wasserman & Wasserman, 2022). The COVID-19 pandemic further accelerated innovation and digitization in healthcare, including wearable and implanted medical devices, telehealth care delivery options, artificial intelligence, and cloud-based data management (Kioskli, Fotis, & Mouratidis, 2021). This progress in innovation continues today but also brings new vulnerabilities and challenges to stay ahead of cybersecurity threats. Given that cyberattacks have tripled in the last few years, understanding the risks, current gaps, and methods to reduce exposure to these targets will equip healthcare institutions with strategies to reduce impacts of cyberthreats (Alder, 2024). There are many organizational and technical considerations for healthcare organizational cybersecurity efforts, include building strong detection programs with trained information technology (IT) personnel and providing education and training to all healthcare staff thereby allowing the system to maintain essential services for patients and the community at large. This scoping review seeks to outline cyberattack mechanisms and targets, describe the current state of U.S. healthcare cybersecurity programs, and provide considerations for emergency response planning and cyberattack prevention for the future.