Ransomware —

The Life-Critical Challenge

Over the past five years, the McGrathNicol Cyber team has tracked the increasing sophistication and evolution of the ransomware model. The tactics are changing, and so too are attitudes towards reporting and ransom payments. Here, we outline key findings and trends for the healthcare sector.

Healthcare, pharmaceutical and aged care providers face urgent and complex decisions when confronted by ransomware attacks. When critical systems are disrupted, the duty to preserve patient and client safety and resident wellbeing may justifiably take precedence. Leaders must navigate these pressures with care, transparency, and resilience.

While 50% of sector respondents report feeling “very prepared” for a cyber attack, the reality is nuanced. Decision-making frameworks in health and aged care are shaped by patient and client safety, privacy obligations, and the need for comprehensive stakeholder engagement. Boards and executives must weigh the risks of data exposure against the imperative to restore essential services for vulnerable patients and residents.