--- title: Malware hits medical devices at 18 percent of healthcare orgs in last year - Interbit Data description: A new CHIME-KLAS survey of CIOs, CISOs and other security leaders finds that few are confident in their ability to protect patient safety and prevent disruptions from cybercriminals. image: https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Imported_Blog_Media/CHIME-himss18-712-1.jpg --- [Skip to main content](https://interbitdata.com/blog/malware-hits-medical-devices-at-18-percent-of-healthcare-orgs-in-last-year#main-content) [Knowledge Base Login](https://knowledge.interbitdata.com/en/knowledge)     [Support](https://interbitdata.com/support/) [![Interbit Logo](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg) ![Interbit Logo](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg)](https://interbitdata.com) - [Show submenu for Solutions Solutions](https://interbitdata.com/solutions/beacon) - [Beacon Downtime](https://interbitdata.com/solutions/beacon/downtime) - [Beacon Delivery](https://interbitdata.com/solutions/beacon/delivery) - [Beacon Navigator](https://interbitdata.com/solutions/beacon/navigator) - [PatientPath](https://interbitdata.com/solutions/patientpath) - [Blog](https://interbitdata.com/blog) - Show submenu for Resources Resources - [Events](https://interbitdata.com/resources/events/) - [Resources](https://interbitdata.com/resources/success-stories/) - Show submenu for About Us About Us - [Meet the Team](https://interbitdata.com/about/team) - [Partners](https://interbitdata.com/about/partners) Open main navigation Close main navigation - Show submenu for Solutions Solutions - Solutions - [Solutions](https://interbitdata.com/solutions/beacon) - [Beacon Downtime](https://interbitdata.com/solutions/beacon/downtime) - [Beacon Delivery](https://interbitdata.com/solutions/beacon/delivery) - [Beacon Navigator](https://interbitdata.com/solutions/beacon/navigator) - [PatientPath](https://interbitdata.com/solutions/patientpath) - [Blog](https://interbitdata.com/blog) - Show submenu for Resources Resources - Resources - [Events](https://interbitdata.com/resources/events/) - [Resources](https://interbitdata.com/resources/success-stories/) - Show submenu for About Us About Us - About Us - [Meet the Team](https://interbitdata.com/about/team) - [Partners](https://interbitdata.com/about/partners) - Search - [Request a Demo](https://interbitdata.com/request-a-demo) [Request a Demo](https://interbitdata.com/request-a-demo) Search [Blog](https://interbitdata.com/blog) Tags - [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) - [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) - [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) - [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) - [Company News](https://interbitdata.com/blog/tag/company-news) - [Cyberattack](https://interbitdata.com/blog/tag/cyberattack) - [Cyberattacks](https://interbitdata.com/blog/tag/cyberattacks) Search - [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) - [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) - [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) - [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) - [Company News](https://interbitdata.com/blog/tag/company-news) - [Cyberattack](https://interbitdata.com/blog/tag/cyberattack) - [Cyberattacks](https://interbitdata.com/blog/tag/cyberattacks) [Business Continuity,](https://interbitdata.com/blog/tag/business-continuity) [IT Challenges,](https://interbitdata.com/blog/tag/it-challenges) [Healthcare Information Systems,](https://interbitdata.com/blog/tag/healthcare-information-systems) [Cybersecurity,](https://interbitdata.com/blog/tag/cybersecurity) [Clinical Workflow](https://interbitdata.com/blog/tag/clinical-workflow) # Malware hits medical devices at 18 percent of healthcare orgs in last year by [Alex Konstantinovsky](https://interbitdata.com/blog/author/alex-konstantinovsky) Oct 5, 2018 ##### Healthcare IT News By Mike Miliard | October 05, 2018 Nearly one in five provider organizations (18 percent) polled for a new joint report from CHIME and KLAS have seen malware or ransomware infect or impact medical devices in the past year and a half. **WHY IT MATTERS** While few of those incidents ultimately resulted in compromised health information or an audit by the Office for Civil Rights, according to almost 150 chief information officers, chief information security officers, chief technology officers and other IT and infosec leaders polled for the report, those device vulnerabilities were a big concern to most of them. Fewer than 40 percent of respondents said they are “very confident or confident” that their health systems’ existing strategies were adequate to safeguard those devices, protecting patient safety and preventing interruptions in clinical workflow, according to the survey. **THE BIGGER TREND** The Medical Device Security 2018 report does suggest that progress is being made as hospitals and health systems try to protect their IT systems and connected devices from [malicious remote access](https://www.healthcareitnews.com/news/cybersecurity-tops-ecris-list-top-10-health-technology-hazards) and corruption from malware. More than one in four (27 percent) of respondents said their security programs were substantial and fully functional, and almost half (47 percent) said they were developed during this calendar year, reflecting a readiness and responsiveness to [persistent and fast-evolving threats](https://www.healthcareitnews.com/news/healthcare-cybersecurity-rut-and-hackers-keep-swinging). Still, “progress has been slow,” according to CHIME and KLAS, which found the CIOs and CISOs they polled citing internal factors – more than 75 percent cited insufficient resources – as major challenges to devices. Poor asset and inventory processes were some other hurdles respondents cited, as well as ambiguous org charts that created murky security ownership and responsibilities. And there were also big complaints about medical device vendors and the regulatory agency that oversees them. A huge majority of those polled – 96 percent – said security vulnerabilities stemmed from manufacturer-related factors. Just as many said they face challenges managing outmoded operating systems and patching devices. Nearly two-thirds of survey respondents said manufacturers shift blame to FDA regulations they claimed hinder them from improving device security. Another third, meanwhile, said lack of [clarity with FDA policies](https://www.healthcareitnews.com/news/fda-doing-enough-support-medical-device-security) gave manufacturers and excuse to duck responsibility for device flaws. **ON THE RECORD** “Safeguarding medical devices requires a joint effort from both provider organizations and device manufacturers,” added KLAS President Adam Gale. “Many providers have the basic building blocks for a general security program in place and are making progress, although it is difficult and time consuming, toward developing a mature program. We also are seeing some manufacturers being more proactive and accountable.” “Unsecured and poorly secured medical devices put patients at risk of great harm if those devices are hacked,” said CHIME CEO Russ Branzell in a statement. “In recent years, that risk has increased exponentially as devices in hospitals and health organizations have become more and more interconnected. Our members are looking for ways to safeguard these devices, but they need resources and support to be effective.” Tags: [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) [Clinical Workflow](https://interbitdata.com/blog/tag/clinical-workflow) **[Alex Konstantinovsky](https://interbitdata.com/blog/author/alex-konstantinovsky)** Oct 5, 2018 ## Related Articles [![Cybersecurity is Clinical Infrastructure:  Why Hospitals Need a Resilience Strategy](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/iStock-963458566-Jul-28-2026-07-39-32-7419-PM.jpg?width=500&height=500&name=iStock-963458566-Jul-28-2026-07-39-32-7419-PM.jpg) Cybersecurity is Clinical Infrastructure:  Why Hospitals Need a Resilience Strategy](https://interbitdata.com/blog/time-to-reframe-the-shiny-object-in-healthcare-it) [![EHR report distribution: 3 workflow basics for hospital efficiency](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Blog%20Post_EHR%20Report%20Distribution.png?width=500&height=500&name=Blog%20Post_EHR%20Report%20Distribution.png) EHR report distribution: 3 workflow basics for hospital efficiency](https://interbitdata.com/blog/ehr-report-distribution-workflow-basics-for-hospital-efficiency) [![Is Your Hospital ETDBW?](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/patientpath-conversation-1.png?width=500&height=500&name=patientpath-conversation-1.png) Is Your Hospital ETDBW?](https://interbitdata.com/blog/is_your_hospital-etdbw) [![Ponemon: Business continuity management vital for data breach recovery](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/IT-staff-computers-712-1.jpg?width=500&height=500&name=IT-staff-computers-712-1.jpg) Ponemon: Business continuity management vital for data breach recovery](https://interbitdata.com/blog/ponemon-business-continuity-management-vital-for-data-breach-recovery) [![Interbit Data, Inc.](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg)](https://interbitdata.com/) Uptime, Downtime, Anytime! - - Keeping critical information moving securely and reliably for nearly 30 years. [Contact Us](https://interbitdata.com/contact/) [info@interbitdata.com](mailto:info@interbitdata.com) 508.647.0013 207 Union Street, 1st Floor Natick, MA 01760 - [About](https://interbitdata.com/about/team) - [Blog](https://interbitdata.com/blog/) - [Events](https://interbitdata.com/resources/events/) - [Support](https://interbitdata.com/support/) Copyright ©2026 All Rights Reserved. - [Privacy and Cookie Policy](https://interbitdata.com/privacy-cookie-policy/) - [Terms and Conditions](https://interbitdata.com/terms_conditions/) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Alex Konstantinovsky", "url" : "https://interbitdata.com/blog/author/alex-konstantinovsky" }, "dateModified" : "2026-07-28T19:42:27.276Z", "datePublished" : "2018-10-05T17:18:48.000Z", "headline" : "Malware hits medical devices at 18 percent of healthcare orgs in last year - Interbit Data", "image" : [ "https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Imported_Blog_Media/CHIME-himss18-712-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://interbitdata.com/blog/malware-hits-medical-devices-at-18-percent-of-healthcare-orgs-in-last-year", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%20logo%20-%20with%20Reg.png" }, "name" : "Interbit Data" } } ```