Singapore - Former Dutch Minister of Public Health and Welfare, Ernst Kuipers, is calling for enhanced cybersecurity within the healthcare sector, warning that cyberattacks not only compromise patient privacy but can also cripple entire hospitals.

From his current position as an administrator at a major technical-medical university in Singapore, Kuipers is closely monitoring the recent hack at Clinical Diagnostics, an event that significantly intersects with his past and present work.

Kuipers highlighted that the Netherlands' national bowel cancer screening program, which invites 2.2 million people aged 55 to 75 every two years, presents a potential target for hackers due to the volume of sensitive data it collects, including names, addresses, and test results.

This warning follows a hack in July where data from half a million women participating in a cervical cancer screening program fell into the hands of criminals. The hack in Rijswijk reportedly copied citizens' service numbers (burgerservicenummers), patients' private addresses, and their test results.

Technical Challenges of Data Linking

Kuipers questioned the practice of storing sensitive data separately and linking it later via coding. He explained: “Somewhere the link between that data must be made, and that’s where the risks lie. What a doctor and researcher always needs is a unique identification of an individual. Look, I am E. Kuipers, my brother is also called E. Kuipers. When we still lived at home, there were two E. Kuipers at one address. The date of birth can be unique, but not if we were twins. The citizen service number is never the same. So it is quite common to use that as a unique identification.”

Lessons from San Diego

Kuipers praised the cybersecurity system at the University of San Diego, which regularly tests American hospitals for vulnerabilities or potential cyberattacks. He added: “They have developed smart systems that scan hospital websites day and night. In this way, they can get the impression very early on that something is wrong. They then contact the institutions to inquire if something is amiss, and if they need help. It’s an ingenious system for early detection of possible digital weaknesses.”

Full Digitization of Healthcare

Kuipers confirmed that all aspects of healthcare have become fully digitized, from GP visits to hospital records and lab results, to ventilators, infusion pumps, CT scanners, appointment systems, inventory management, and air monitoring – everything is digital.

Broad Implications of Security Breaches

Kuipers elaborated that the consequences of data breaches extend beyond privacy violations, as they can bring an entire hospital to a standstill. He cited a hack last year at a pathology center in London, which led to the postponement of thousands of surgeries because blood could no longer be tested. He stressed that digital security is crucial, and the consequences of failures can be severe.

Policy Recommendations

Kuipers believes that investments in critical infrastructure, including hospitals, labs, and pharmacies, should be part of NATO's newly set defense benchmarks. He pointed out that hospitals can be targets during wartime, as seen in Syria and Ukraine, where cyberattacks impact the ability to care for wounded soldiers and demoralize citizens.

Need for Central Support

Kuipers called for strong central support, arguing that hospitals, especially smaller ones, cannot solely ensure full readiness and continuous updating against all types of attacks. He proposed establishing a command center to coordinate crisis response, similar to the national center set up during the COVID-19 pandemic. He mentioned that the allocation of €300 million for pandemic preparedness, made when he was minister, was reversed by the current government, which he deemed “unwise.”

Dependency on Few Suppliers

Kuipers noted that reliance on a limited number of suppliers in sectors such as pharmaceuticals (over 80% of medicines come from India) and IT systems for electronic health records makes the healthcare system vulnerable.

Conclusion

Kuipers emphasizes that the key challenge is how to manage these risks and minimize them as much as possible, while acknowledging that they cannot be brought to zero.

Regional Perspective

From Singapore, a global technology and medical hub, Ernst Kuipers offers a unique perspective on the impact of cyber breaches on healthcare systems. His dual experience as a former minister and an administrator at an international academic institution grants him a broad view on the importance of investing in cybersecurity, not just for data protection, but for ensuring the continuity of essential healthcare services, especially amidst increasing geopolitical tensions.

Analysis

Kuipers' statements underscore the accelerated digital transformation within the healthcare sector, which brings significant benefits in efficiency and diagnostic accuracy but also opens new avenues for cyberattacks. His call to enhance cybersecurity, particularly the idea of continuous penetration testing and the implementation of early detection systems, aligns with global best practices in digital risk management. Furthermore, linking investments in healthcare cybersecurity to national defense benchmarks reflects a deep understanding of the interconnected nature of critical infrastructure in today's world. The potential for an entire hospital to be crippled by a cyberattack is not merely a theoretical possibility but a real threat with potentially life-altering consequences, making the security of these systems a top priority for governments and healthcare institutions alike.