Cybercrime is Targeting Healthcare – Here’s What You Need to Know
Introduction
Cybercrime is on the rise, and the healthcare sector is one of the biggest targets. In Australia and other Five Eyes countries (Australia, USA, UK, Canada, and New Zealand), hackers are increasingly attacking hospitals, clinics, and other medical organisations.
The Australian Signals Directorate’s Cyber Security Centre (ASD’s ACSC), along with international partners like the FBI and New Zealand’s National Cyber Security Centre, has seen a clear increase in threats to the healthcare industry. These attacks often involve stealing patient records, disrupting medical services, or demanding ransom payments.
Why Healthcare is at High Risk
Healthcare organisations store large amounts of sensitive personal data — such as medical records, billing information, and patient history. Cybercriminals see this as highly valuable. Also, healthcare providers rely on digital systems to care for patients. A single attack can shut down operations, delay treatments, and even put lives at risk.
How healthcare Providers can Strengthen Cyber Defences
To help the healthcare sector fight back, ASD and its global partners have released a new guide on SIEM and SOAR platforms:
- SIEM (Security Information and Event Management) tools collect and analyse security data from your systems.
- SOAR (Security Orchestration, Automation, and Response) helps respond to threats faster and more effectively.
The guide includes:
- Executive Guidance – Explains the value of SIEM/SOAR for healthcare leaders and how to plan for them.
- Practitioner Guidance – Offers technical advice for IT and cybersecurity teams.
- Logging Priorities – Lists the most important log types to monitor, including those from medical devices, servers, networks, and cloud platforms.
By using these platforms, healthcare organisations can detect threats early and take quick action to protect their patients and systems.
Be aware of Fast Flux Threats

A new cyber method known as “fast flux” is being used to spread malware and phishing websites. This method changes IP addresses and DNS records quickly to avoid detection. Healthcare IT teams should talk to their service providers to make sure fast flux threats are being blocked properly.
Spyware is also a Concern
Spyware is being used by cybercriminals to secretly monitor individuals, especially those linked to sensitive topics like human rights or political activism. Tools like BADBAZAAR and MOONSHINE have been found stealing personal data from mobile devices. Healthcare professionals working in global health or advocacy may be at higher risk and should secure their devices.
Russian Cyber Attacks on Healthcare-Related Sectors
A state-sponsored Russian hacking group known as APT28 has been targeting industries related to healthcare logistics — including medical transport, supply chains, and IT systems that support healthcare services. Their tactics include stealing email passwords and gaining access to internal systems. Healthcare organisations involved in logistics or aid delivery should be on high alert.
Protecting AI Systems in Healthcare
Many healthcare organisations are beginning to use artificial intelligence (AI) in diagnostics, patient monitoring, and operations. But AI systems also carry new cybersecurity risks. ASD has released advice on how to protect sensitive healthcare data used in AI systems — from development to deployment.
Healthcare providers are also encouraged to complete ASD’s AI survey to help shape future cybersecurity support.
Conclusion: Stay Aware, Stay Secure
Cybercriminals are increasingly targeting the healthcare sector. From data theft to system shutdowns, the risks are real — but there are ways to stay protected. Implementing modern tools like SIEM and SOAR, staying aware of new threats like fast flux, and securing your AI systems are key steps to building cyber resilience.
Healthcare is about saving lives — let’s protect it from cyber threats too.
Call to Action:
Borderless CS consistently ranks among the top cyber security companies Australia has to offer. Discover how we can protect your business – contact us today!