<img src="https://certify.alexametrics.com/atrk.gif?account=kla4t1zDGU20kU" style="display:none" height="1" width="1" alt="">
Contact us
Free Quickscan →
Cybersprint Digital Risk Protection Platform

Digital Risk Protection

We’ve developed a unique Digital Risk Protection SaaS-platform that works 24/7 as an automated ethical hacker, continuously in search of online vulnerabilities. Read more

Cybersprint provides realtime insights

Make the world more cyber-secure

Cybersprint protects organisations by providing real-time insights into their online footprint. Read more

Dutch hospitals vulnerable to cyber attacks

by Cybersprint News Feb 6, 2019

PRESS RELEASE The Hague, 6 February 2019 – The cyber security of hospitals in the Netherlands leaves room for improvement. This makes some hospitals more vulnerable to hacking attacks, possibly leading to data breaches and the leaking of sensitive patient records, concludes a study conducted by Cybersprint, commissioned by Dutch national magazine Elsevier Weekblad

Cybersprint investigated a total of 7,258 websites, servers and IP addresses belonging to the nation’s 8 academic, the 10 largest and the 10 smallest hospitals (based on the number of patients). All 28 hospitals showed a certain degree of vulnerabilities in their cyber security. Some cases were critical, demanding immediate attention. For example, the baby webcam of one of the academic hospitals was still set to factory defaults, meaning that anyone could access the babycam to see the newborns.

In one of the academic hospitals, 25% of all systems were running on outdated software. Furthermore, five of the 10 largest hospitals hadn’t updated all of their software, revealing dated software too. “Outdated software could have severe consequences on the security of patient records,” says Cynthia Schouten, Chief Information Security Officer at Cybersprint. “It makes it quite ease for malicious parties to access a system. It is a matter of downloading a certain program and applying it to the website. An 11-year-old could do that.”

The smaller hospitals scored significantly better, showing no outdated software. Still, the study revealed configuration errors in half of the websites. These kind of errors don’t necessarily result in a direct hacking attack, but do make it easier for hackers to find a way in. Not setting up a password for a baby webcam, for instance, is a configuration liability with potentially serious ramifications. It could also lead to unsecured network connections, making patient records vulnerable to being intercepted.

Last year, most data leaks were reported in the healthcare sector. Almost a third of the nearly 21,000 data leaks reported to the Dutch Autoriteit Persoonsgegevens (AP, supervisor of the gathering and processing of personal data), originated from the healthcare sector. “It becomes apparent that most of the data leaks caused by hacking and phishing attacks are reported by the health sector,” says Inger Sanders, spokesperson at AP. Still, a high number of reported data leaks isn’t all bad news. “It also shows data leaks are taken seriously and people take the time to report an incident,” Sanders states.

Hospitals would do well to examine the results of the study. “Not changing the factory default settings of any smart or IoT-device is a security incident,” states the AP. “It concerns new-born babies in the instance of the babycam, a really vulnerable group. Any data leak must be reported to the AP, and in certain cases also to the people involved, such as the parents, so they can take action themselves as well.”

You can read the story on the website of Elsevier Weekblad here, or as of tomorrow in the printed magazine. 

MEET CYBERSPRINT AT INFOSECURITY NETHERLANDS

On 30 and 31 October 2019 Cybersprint will be present at the Infosecurity Netherlands at Jaarbeurs Utrecht. Infosecurity.nl is the top Dutch exhibition in the field of IT security, data management and cloud computing for IT managers and IT professionals. Please visit our booth C031 where we will demonstrate our Digital Risk Protection solutions. If you use the Cybersprint link below, you can register for a free entrance ticket and you can even be selected by the organisation for a VIP treatment during the Infosecurity. In addition, you can register for our presentation and learn more about the latest ‘Innovations in Cyber Security’.

read more

Participating 600Minutes Cyber Security Strategies

Cybersprint will participate in the annual 600Minutes Cyber Security Strategies event on 4 September 2019, in Bussum, the Netherlands. This year’s topic is ‘Preparing for the next threats’. We expect to meet many organisations interested in cyber security and hope to help them with advice and solutions. In addition, we will provide insights into the innovative development of our cyber security platform.

read more

Visit Cybersprint at it-sa from 8-10 october 2019

From 8-10 October 2019, Cybersprint will be present at the it-sa 2019 in Nuremberg, Germany. We invite you to visit us at Hall 10 stand 617, and at the Holland IT Security House at stand 512 for a free demo of our Digital Risk Protection platform. The free demo will provide you with insights into your online attack surface and possible vulnerabilities. Our international team, including German speaking team members, is ready to provide you with information on how to protect your organisation from digital threats.

read more

Do you have a question?

Our experts have the answers

Contact us