INDIBA Suffers Ransomware Attack, Operating in Healthcare Services Sector

Company Overview

INDIBA, a company with a 40-year legacy in the healthcare sector, specializes in Radiofrequency, Laser devices, and regenerative medicine solutions. Their offerings cater to a wide range of medical needs across Aesthetics, Rehabilitation, Intimate Health, Veterinary, and Pharma sectors. The recent ransomware attack on INDIBA, claimed by the group Sparta on their dark web leak site, underscores the persistent cybersecurity threats faced by the healthcare industry.

Vulnerabilities and Threats

The healthcare sector's rich repository of sensitive data makes it a prime target for ransomware attacks. Notably, the All India Institute of Medical Sciences (AIIMS) experienced a significant ransomware attack in 2022, compromising 40 million records, including sensitive personal information. Despite the lack of official confirmation, reports suggest a ransom demand of Rs 200 crore. The sector's vulnerability has been exacerbated by the pandemic, with a staggering 1.9 million cyberattacks recorded against the healthcare industry in India in 2022 alone. Another alarming incident involved the Indian Council of Medical Research (ICMR), which suffered a cyberattack exposing the personally identifiable information (PII) of 81 crore Indians, marking potentially the largest data breach in Indian history.

Mitigation Strategies

To counter the threat of ransomware, healthcare organizations must adopt a multi-faceted approach to cybersecurity. This includes minimizing unnecessary data storage, enhancing patch management, and refining backup and restoration processes. Regular audits of healthcare infrastructure, including devices, networks, and endpoints, are crucial. Additionally, conducting cyber awareness programs can significantly elevate the cybersecurity knowledge and preparedness of staff members.

The ransomware attack on INDIBA serves as a stark reminder of the critical need for robust cybersecurity defenses in the healthcare sector. With the industry's increasing reliance on digital technologies, safeguarding patient data and ensuring the continuity of healthcare services must be paramount.

Sources

• AIIMS ransomware attack: what it means for health data privacy - ET CISO. Available at ET CISO
• 1.9 million cyberattacks against Indian healthcare recorded in 2022. Available at Hindustan Times
• Cyberattacks on healthcare sector rising, 60% of organizations hit in a year: report. Available at Financial Express