Almost One-Third of Rural Hospitals Benefiting from Microsoft’s Cybersecurity for Rural Hospitals Program
Earlier this month, Microsoft provided an update on its Cybersecurity for Rural Hospitals Program, an initiative designed to protect access to healthcare for the 46 million Americans living in rural communities by helping rural hospitals improve cybersecurity and resiliency. Patients in rural areas need to travel more than twice as far as residents in urban areas to reach their nearest hospital. If the nearest hospital experiences a ransomware attack that causes disruption to hospital operations, rural residents must travel a further 20 miles for common services and often a further 40 miles for specialized services.
Rural hospitals often have low operating margins, high fixed costs relative to their urban counterparts, and have lower reimbursement rates from insurers. Between 2010 and 2017, rural hospitals were closing at a rate of around 1 per month, and there were 136 rural hospital closures in 2020 and 20221 alone. In 2022, 429 rural hospitals were at high financial risk. Due to limited budgets, rural hospitals often lack the resources to implement key cybersecurity improvements.
Cybercriminals view rural hospitals as easy targets as they typically lack the necessary financial resources for investment in cybersecurity, rely on aging technology, and often struggle to hire and retain skilled cybersecurity staff. Rural hospitals also store significant amounts of highly sensitive, valuable, and easily monetized data. Microsoft estimates that an independent rural hospital with 50 beds and 200 end users would need to invest between $30,000 and $40,000 to address the biggest cybersecurity risks. Addressing the top vulnerabilities at the 1,000 or so independent rural hospitals in the United States would cost an estimated $40-$45 million.
Microsoft launched its Cybersecurity for Rural Hospitals Program in June 2024 to help address the problem. Participants in the program benefit from free cybersecurity assessments and cybersecurity training and can obtain significant discounts on Microsoft’s security solutions, including up to 75% discounts for independent Critical Access Hospitals and Rural Emergency Hospitals. “Healthcare should be available no matter where you call home, and the rise in cyberattacks threatens the viability of rural hospitals and impacts communities across the U.S.,” said Justin Spelhaug, corporate vice president, Microsoft Philanthropies, at the launch of the program last year. “Microsoft is committed to delivering vital technology security and support at a time when these rural hospitals need them most.”
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
Microsoft has confirmed in a recently published white paper that participation in the program has far exceeded projections, with more than 550 rural hospitals now participating in the program – almost one-third of rural hospitals in the United States. Microsoft explained that 375 hospitals have participated in cybersecurity assessments funded by Microsoft, and more than 1,000 individuals have taken part in its free cybersecurity training for rural hospitals.
At the launch of the program, Microsoft learned that most rural hospitals hadn’t implemented basic cybersecurity best practices such as email security and multi-factor authentication. Early assessments revealed that only 29% were adequately separating end-user and privileged accounts, and most hospitals lacked robust cybersecurity training programs, despite the high risk of phishing and social engineering threats in the healthcare sector. Through the program, Microsoft has helped hospitals improve baseline cybersecurity and become less vulnerable to the most common threats such as phishing and ransomware attacks, and has also addressed specific practice needs and identified broader systemic issues to help them better serve their communities.
The aim of the white paper is to increase awareness and understanding of the issues faced by rural hospitals and drive collaboration between tech companies, policymakers, and healthcare providers, as a collaborative effort is required to tackle the cybersecurity challenges faced by rural hospitals and improve cybersecurity resilience.
