FireEye provides cybersecurity solutions for healthcare organizations. The document discusses how healthcare organizations suffer data breaches frequently and that regulatory compliance is not sufficient for protection against modern cyber attacks. All healthcare organizations that experienced breaches in 2014 were compliant with security standards. The annual cost of data breaches for the healthcare industry is $6 billion and the 10 largest healthcare cyber attacks of 2015 affected over 111 million records. Stronger cybersecurity is needed to protect against financial losses from breaches, lawsuits, and system damage.

1. FireEye, Inc.
1440 McCarthy Blvd. Milpitas, CA 95035 / 408.321.6300 / 877.FIREEYE (347.3393) / info@fireeye.com
fireeye.com
© 2016 FireEye, Inc. All rights reserved. FireEye is a registered trademark of FireEye, Inc. All other
brands, products, or service names are or may be trademarks or service marks of their respective
owners. INFO.HEALTH.EN-US.072016
Learn More www.fireeye.com/solutions/healthcare.html
THREAT PROGNOSIS
Healthcare Cyber Security:
Healthcare organizations
suffer breaches as
frequently as people
catch a cold. Regulatory
compliance, while
necessary, is not sufficient
protection against today’s
cyber attacks. 100% of
healthcare organizations
that were victims of cyber
breaches in 2014 were
security compliant, with
up-to-date anti-virus
signatures and firewalls.1
“Good enough”
security never is
1 FireEye (2015). "M-Trends 2015: A View from the Front Lines."
2 Ponemon Institute (2015). "2015 Cost of a Data Breach Study:
Global Analysis."
3 HIMSS News (June 30, 2015). "HIMSS Survey Finds Two-Thirds of
Healthcare Organizations Experienced a Significant Security Incident
in Recent Past."
79%of surveyed
companies were
breached multiple
times in the past
24 months.2
40%were breached
5+ times.2
of healthcare
organizations have
recently experienced
a significant security
incident.3
2/3
solutions / HEALTHCARE
Why is Healthcare
Under Attack?
Medical and
prescription
records
(permanent data)
Social
Security
numbers
(hard to change)
System compromise
Injury or death due to
compromised medical devices
INSURANCE FRAUD
HIPAA FINES
(as an example)
Identity theft
(hard to repair)
Lawsuits, IT system
remediation, reputation loss
per connected
medical device5
$7 to $9 million
maximum fine per
incidence of protected
health information
(PHI) theft per year
$1.5 million
FireEye can help you build a case
for stronger cyber security right now
1 2
Factor in
financial cost
34
475-45-XXXX
341-66-XXXX
$3.63 million6
176-82-XXXX
But Still…
Executives
Wait
of CIOs/CISOs understand
the need for stronger cyber
security but do not act until
a trigger event occurs6
65%
6 Ponemon Institute (2013). "The Post Breach Boom."
The annual cost of data
breaches for the healthcare
industry is
Criminals Make Healthcare Pay
4 Partnoy, Frank. Globalist.com (July 21, 2012). "The Cost of a Human Life, Statistically Speaking.
5 Munroe, Dan. Forbes.com (Dec. 31, 2015). "Data Breaches in Healthcare Totaled Over 112 Million Records in 2015."
$6 billion2
The 10 largest healthcare
cyber attacks of 2015 affected
111,022,154 records,5
valued
at up to $154 per record
breached!2
It’s easy to see
how compromised systems
and data loss lead directly
to financial losses.
Factor in
financial gains
Factor in
cost assumptions
Discover your
break-even point
Healthcare includes providers,
medical insurers and
pharmaceutical and other
life sciences organizations.
Their records have a higher
black market value than credit
cards. Specifically, medical and
prescription records and Social
Security numbers have a long
shelf life for identity theft and
insurance fraud.