Ransomware attacks pose a significant threat to hospitals across the United States, but rural hospitals and their patients are particularly vulnerable, according to a new study. The research, led by Hannah Neprash, an associate professor at the University of Minnesota School of Public Health, highlights the disproportionate impact of ransomware attacks on rural healthcare facilities. 

"Ransomware attacks are bad news for hospitals and patients no matter where they happen, but they’re especially harmful to rural hospitals and patients," Neprash emphasized in a press release. 

The study, which analyzed data from 43 rural and 117 urban hospitals that experienced ransomware attacks between 2016 and 2021, reveals that these attacks have more than doubled in the past five years. Although ransomware incidents are more prevalent in urban areas, rural hospitals face more severe consequences when they occur. 

During the month of May, a cyberattack disrupted operations at Ascension, a major St. Louis-based healthcare system with 140 hospitals across 19 states. This incident followed another attack on a subsidiary of UnitedHealth Group, which compromised the billing systems at pharmacies nationwide and jeopardized the personal data of up to one-third of Americans. 

UnitedHealth Group ultimately paid USD 22 million to the cybercriminals responsible. While urban hospitals often have the resources to recover more quickly, rural hospitals are typically smaller, financially vulnerable, and serve older, poorer populations with worse overall health. 

The study found that patient visits decreased at both rural and urban hospitals during the first week following an attack. However, rural patients were more severely affected, often having to travel over 30 minutes to reach the nearest unaffected hospital, compared to under 10 minutes for urban patients. 

The research underscores the need for rural hospitals to develop coordinated strategies with nearby healthcare facilities to prepare for potential cyberattacks. "Preparing for cyberattacks is really a coordination challenge since it would likely require cooperation across hospitals that usually compete with each other in order to ensure everyone gets safe and effective care," said Neprash. 

This study highlights the pressing need for enhanced cybersecurity measures and collaboration among rural healthcare providers to mitigate the devastating effects of ransomware attacks on vulnerable communities.