Telecom
75% of Healthcare Organizations Fall for Ransomware Attacks – Sophos Report
Sophos, a global leader in innovating and delivering cybersecurity as a service, on Thursday shared its sector survey report, “The State of Ransomware in Healthcare 2023,” which revealed that, among those organizations surveyed, cybercriminals successfully encrypted data in nearly 75% of ransomware attacks.
This is the highest rate of encryption in the past three years and a significant increase from the 61% of healthcare organizations that reported having their data encrypted last year.
In addition, only 24% of healthcare organizations were able to disrupt a ransomware attack before the attackers encrypted their data—down from 34% in 2022; this is the lowest rate of disruption reported by the sector over the past three years.
“To me, the percentage of organizations that successfully stop an attack before encryption is a strong indicator of security maturity. For the healthcare sector, however, this number is quite low—only 24%. What’s more, this number is declining, which suggests the sector is actively losing ground against cyberattackers and is increasingly unable to detect and stop an attack in progress.
“Part of the problem is that ransomware attacks continue to grow in sophistication, and the attackers are speeding up their attack timelines. In the latest Active Adversary Report for Tech Leaders, we found that the median time from the start of a ransomware attack to detection was only five days. We also found that 90% of ransomware attacks took place after regular business hours.
“The ransomware threat has simply become too complex for most companies to go at it alone. All organizations, especially those in healthcare, need to modernize their defensive approach to cybercrime, moving from being solely preventative to actively monitoring and investigating alerts 24/7 and securing outside help in the form of services like managed detection and response (MDR),” said Chester Wisniewski, director, field CTO, Sophos.
Additional key findings from the report include:
· In 37% of ransomware attacks where data was successfully encrypted, data was also stolen, suggesting a rise in the “double dip” method
· Healthcare organizations are now taking longer to recover, with 47% recovering in a week, compared to 54% last year
· The overall number of ransomware attacks against healthcare organizations surveyed declined from 66% in 2022 to 60% this year
· Compromised credentials were the number one root cause of ransomware attacks against healthcare organizations, followed by exploits
· The number of healthcare organizations surveyed that paid ransom payments declined from 61% last year to 42% this year. This is lower than the cross-sector average of 46%
“In 2016, the Red Cross Hospital of Córdoba in Spain suffered a ransomware attack that reached servers and encrypted hundreds of files, medical records and other important patient information. It was a major disruption to our operations and interfered with our ability to care for our patients.
“The stakes are high in ransomware attacks against healthcare organizations—and attackers know that—meaning we’ll always be a target. After this ransomware attack, we worked hard with Tekpyme to bolster our defenses, and now we have reduced our incident response time by 80%.
“I think the industry as a whole is making improvements, but there is still work to do, because of the constantly changing nature of cybercrime.
“Hopefully healthcare organizations can leverage the help that is available from security vendors such as Sophos to prevent a very real ‘threat to life’ if systems go offline due to a ransomware attack,” said José Antonio Alcaraz Pérez, head of information systems and communications at Cruz Red Andalusia in Spain.
“Cyberspace today is ripe with technically sophisticated actors looking for vulnerabilities to exploit. What all this translates to is a multidimensional cyberthreat of actors who have the tools to paralyze entire hospitals. Partnering with the private sector is critical to our mission. The information [they] share has real-world impacts and can save real businesses and real lives,” said Christopher Wray, FBI Director.
Sophos recommends the following best practices to help defend against ransomware and other cyberattacks:
· Strengthen defensive shields with:
o Security tools that defend against the most common attack vectors, including endpoint protection with strong anti-ransomware and anti-exploit capabilities
o Zero Trust Network Access (ZTNA) to thwart the abuse of compromised credentials
o Adaptive technologies that respond automatically to attacks, disrupting adversaries and buying defenders time to respond
o 24/7 threat detection, investigation and response, whether delivered in-house or by a specialized Managed Detection and Response (MDR) provider
· Optimize attack preparation, including regularly backing up, practicing recovering data from backups and maintaining an up-to-date incident response plan
· Maintain security hygiene, including timely patching and regularly reviewing security tool configurations
To learn more about the State of Ransomware in Healthcare 2023, download the full report from Sophos.com.
The State of Ransomware 2023 survey polled 3,000 IT/cybersecurity leaders in organizations with between 100 and 5,000 employees, including 233 from the healthcare sector, across 14 countries in the Americas, EMEA and Asia Pacific.
Airtel Money Africa, Airtel Africa’s mobile money arm, announced an extended partnership with Africa’s largest mobile money payment service provider (PSP) pawaPay to enable seamless cross-border payments for licensed International Money Transfer Operators (IMTOs) across seven key Airtel Africa markets.
This collaboration officially launches pawaPay’s service for inbound remittances into Uganda, Rwanda, Zambia, Malawi, Gabon, Congo Brazzaville, and Tanzania. The partnership allows IMTOs to efficiently deliver funds globally directly to recipients’ more than 161 million Airtel Money customers wallets, leveraging pawaPay’s renowned reliability, scalability, and 99.9% platform uptime.
Building on five years of trusted collaboration in domestic mobile money, this expansion strengthens and simplifies Airtel Money Africa’s backend processes, using pawaPay’s robust payment service provider infrastructure, which processes over four million transactions daily.
Airtel Money Africa CEO, Ian Ferrao, said: “We’re pleased to expand our partnership with pawaPay to advance international remittances across Africa. Their proven reliability and commitment to African consumers make them an ideal partner. This integration empowers International Money Transfer Operators to securely connect with Airtel Money’s growing footprint, delivering real-time payments that support financial inclusion and economic growth.”
pawaPay CEO, Nikolai Barnwell, said: “Our mission is to simplify payments for businesses in Africa, and remittances are pivotal. Deepening our relationship with Airtel Money allows International Money Transfer Operators to leverage our world-class infrastructure for seamless cross-border payments.”
Remittances remain critical for millions of Africans, enabling family support, entrepreneurship, and financial inclusion. This partnership ensures secure, instant mobile wallet transactions, key to advancing Africa’s digital economy. pawaPay will extend this capability to additional Airtel Money Africa markets in coming months.
Rubrik, the cybersecurity company, and Sophos, a global leader of innovative security solutions for defeating cyberattacks, have announced a strategic partnership to provide Sophos M365 Backup and Recovery Powered by Rubrik.
This marks the first Managed Detection and Response (MDR)-optimized Microsoft 365 backup and recovery solution fully integrated into Sophos Central, Sophos’ security operations platform.
Designed to support IT and cybersecurity teams, the new offering will provide a unified global platform to enhance cyber resilience against ransomware, account compromise, insider threats, and data loss in SharePoint, Exchange, OneDrive, and Teams.
“We are reshaping what it means to stay operational in a world shaped by constant digital disruption,” said Joe Levy, CEO, Sophos. “This is the future of cyber resilience: an intelligent, adaptive partnership that ensures organizations remain secure, responsive, and uninterrupted. By combining Sophos’ prevention-first approach with Rubrik’s unwavering recovery capabilities, we empower businesses to withstand attacks and maintain continuity, even under pressure.”
Sophos will offer a powerful new add-on solution for its more than 75,000 MDR and XDR customers, enabling fast, secure recovery of critical Microsoft 365 data in the event of accidental deletion or malicious compromise.
This solution integrates Rubrik’s industry-leading SaaS-based protection directly into the trusted Sophos Central platform, giving organizations the flexibility to enhance their existing security operations with robust data recovery capabilities.
The Sophos Central platform integrates over 350 different telemetry sources across endpoint, cloud, network, identity, email and business applications. The platform leverages deep learning, custom LLMs, and frontier models to detect and respond to threats across the entire attack surface, enhancing defense effectiveness.
“The reality of today’s threat landscape demands a holistic approach to cyber resilience,” said Bipul Sinha, CEO, Chairman, and Co-founder of Rubrik. “With AI-enabled attacks and sophisticated breaches on the rise, organizations need more than just prevention; they need the ability to recover rapidly and reliably. Our partnership with Sophos delivers this critical capability directly within a platform security teams already use and trust, raising the bar for Microsoft 365 resilience.”
The Evolving Threat Landscape
According to The State of Ransomware report by Sophos, nearly half of organizations impacted by ransomware chose to pay the ransom to recover their data. Despite this, only 54% of affected companies relied on backups for data restoration, highlighting a continued gap in effective cyber resilience practices.
Recent research highlights the urgent need for robust Microsoft 365 data protection: 60% of Microsoft 365 tenants have experienced account takeovers, a frequent launchpad for lateral movement within an organization, and 81% have encountered email compromise.
When global admin credentials are compromised, attackers can manipulate retention settings and permanently delete critical business data.
Existing tools were not designed for comprehensive, large-scale recovery, which requires speed, granularity, and reliability for rapid restoration.
Sophos MDR and XDR customers will benefit from:
- Secure, immutable backups: Rubrik will isolate Microsoft 365 backups with air-gapped storage, WORM locks, and customer-held encryption keys. Multifactor authentication and data lock prevent tampering, even with compromised credentials.
- Fast, flexible recovery: Customers will be able to restore Microsoft 365 emails, OneDrives, SharePoint sites, Teams channels, and more to original or alternate users, including inactive accounts.
- Automated protection: Rubrik will automatically discover Microsoft 365 users, sites, and mailboxes, applies Entra ID-based policies, and supports delegated admin – all integrated with Sophos Central to reduce manual effort.
- Unified experience: Microsoft 365 protection and security operations will be managed via Sophos Central with no extra tools.
Rubrik and Sophos’ shared commitment to helping organizations operate with confidence in the face of risk, will provide Sophos customers and partners with a powerful solution to recover with speed and precision when threats inevitably break through.
This offering will be available through Sophos’ channel partner network in the coming months.
MTN Nigeria is deepening its role as an industry enabler with the launch of its Network-as-a-Service (NaaS) platform and the signing of its first Mobile Virtual Network Operator (MVNO) agreement, Chief Financial Officer Modupe Kadri revealed on Monday.
Speaking in an exclusive Channels TV interview, Kadri confirmed that MTN has opened its network to T2 (formerly 9Mobile) under the NaaS framework approved by the Nigerian Communications Commission (NCC). This allows T2 subscribers to roam seamlessly on MTN’s infrastructure while retaining their own customer relationships and branding.
“Network-as-a-Service is a platform where MNOs can roam within the NCC framework on MTN’s network,” Kadri explained. “It makes the industry more efficient in the utilisation of scarce resources.”
Kadri also announced MTN’s first MVNO partnership, with the virtual operator set to go live soon. MVNOs lease network capacity from established mobile operators, enabling them to offer services without investing in costly infrastructure.
These initiatives align with NCC’s push for infrastructure sharing to boost sector efficiency and coverage. By providing network access to smaller players, MTN is positioning itself as a critical enabler of market expansion.
The Nigerian telecom industry, valued at $10.8 billion, now reaches 169 million active phone lines and over 142 million internet subscribers. While competition remains intense, the trend toward infrastructure sharing is expected to lower barriers to entry for new service providers, increase service quality, and expand access in underserved areas.
“As MTN, we are here to help the industry survive,” Kadri said. “It makes it much easier when you see other operators willing to come on and provide quality services to Nigerians, which we all deserve.”
Industry analysts view the move as a strategic diversification for MTN. With voice revenues plateauing and data driving growth, shared network models offer new revenue streams and a hedge against market saturation.
MTN’s investments in NaaS and MVNO partnerships are part of its broader transformation strategy, which also includes cost optimisation, forex risk reduction, and targeted capital expenditure to strengthen network quality.
NIMC Sets 48-hour Deadline for Diaspora Partners to Activate New Licences
Airtel Money Africa Partners pawaPay for Seamless International Remittances Across Africa
NBS Reports ₦6.72 Trillion VAT Haul as Tax Reforms Pay Off
Rubrik Joins Forces with Sophos to Reinvent M365 Recovery
MTN Nigeria Rolls Out Network-as-a-Service and Signs First MVNO to Drive Industry Efficiency
News1 day agoGoogle Hit by AI-driven Cyber Attack
General News1 day agoKuwait Busts Nigerian Cybercrime Ring Targeting Telecom Tower, Banks
E-Business1 day agoZequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector
News1 day agoFIRS Rolls out e-invoicing System for Large Corporate Taxpayers
Telecom1 day agoT2 Commits to Innovation, Resilience as Customer-centric Ethos Form New Focus
Telecom1 day agoMTN Nigeria’s Mega Billion Promo Turns Airtime into Fortune for Thousands Amid Economic Strain
Telecom1 day agoI see Crisis, Resignations @ MTN, Airtel, Others – Primate Ayodele
E-Business1 day agoPalmPay Partners AXA Mansard Health to Make Digital Insurance Accessible, Affordable