Cybersecurity Breaches Research Articles

The Growing Cybersecurity Crisis in Healthcare: A Call to Action

Electronic healthcare technology is pervasive throughout the globe, and it affords vast opportunities to enhance clinical outcomes, as well as for the transformation of models of care. Concerns are, however, growing, related to healthcare data and device security. Increased connectivity to legacy computer networks brought cybersecurity vulnerabilities for medical devices. Healthcare represents an attractive target for cybercrime because healthcare data is precious. This sector in present times is full of unique cybersecurity challenges, especially for susceptible kinds of patient information at stake. Second, many legacy systems will be prevalent—not adding more to that—with the changing face of cyber threats. Cybersecurity breaches have comprised stealing health information and focused ransomware attacks on hospitals; this could mean as vivid an attack as on implanted medical devices. This only points to the fact that ransomware attacks and other kinds of cyber-attacks against hospitals and other medical facilities are gaining ground; there is every reason to get alarmed and put in place stricter cybersecurity measures. An excellent healthcare cybersecurity strategy, therefore, has to consider access control, intrusion detection systems, encryption techniques, and periodic security testing. Data breaches and cyber-attacks are forcing any healthcare provider to invest in new state-of-the-art technologies related to keeping pace with trends regarding cybersecurity. The dangers that can be caused by cyber-attack include a considerable diminution in patient trust, potential health system collapse, human life threats, etc. On the whole, cybersecurity is strenuously linked with the question of patient safety.

THE IMPACT OF CYBERSECURITY BREACHES ON BIG BUSINESSES

This paper explores the significant impact of cybersecurity breaches on large businesses, focusing on financial losses, operational disruptions, reputational damage, and legal challenges. It examines key breach types such as data theft, ransomware, and phishing, and highlights the increasing complexity of cyber threats due to emerging technologies like AI, IoT, and 5G. Case studies, including Target and Equifax, demonstrate the long-term consequences of breaches. The paper emphasises the importance of proactive cybersecurity strategies, leadership involvement, and continuous adaptation to evolving threats. In conclusion, it underscores the need for businesses to invest in robust cybersecurity measures to protect assets, maintain consumer trust, and ensure long-term resilience in an increasingly digital world.

Cybersecurity threats and preparedness: Implications for dental schools.

Cybersecurity threats are a growing concern in healthcare, where digital systems now underpin patient care, financial management, and educational operations. A cybersecurity breach in a Dental school environment can have widespread consequences to the mission of the school-patient care, research, education and service. For dental school administrators, these risks highlight the necessity of robust cybersecurity measures. For student learners, the impact may include interruptions to their education. For patients, it could mean compromised personal data and reduced access to clinical care. While many sectors have responded to increasing cyber threats by enhancing their defenses, healthcare and dental schools, often lag in implementing necessary protections. This emphasizes the need for proactive measures, such as regular system audits, advanced encryption methods, and ongoing cybersecurity training for administrators and students alike, to mitigate future risks and safeguard institutional integrity.

Perception and Trust in Autonomous Vehicles Post Cyber Security Incidents

The integration of Autonomous Vehicles (AVs) into modern systems of transportation brings with it a new and transformative era. Central to the successful realisation of this transformation is the public’s trust in these vehicles and their safety, particularly in the aftermath of cyber security breaches. The following research therefore explores the various factors underpinning this trust in the context of cyber security incidents. A dual-methodological approach was used in the study. Quantitative data was gathered from structured questionnaires distributed to and completed by a cohort of 151 participants and qualitative data, from comprehensive semi-structured interviews with AV technology and cyber security experts. Rigorous Structural Equation Modelling of the quantitative data then allowed for the identification of the key factors influencing public trust from the standpoint of the research participants including the perceived safety of AV technology, the severity of cyber security incidents, the historic cyber security track record of companies and the frequency of successful cyber security breaches. The role of government regulations, though also influential, emerged as less so. The qualitative data, processed via thematic analysis, resonated with the findings from the quantitative data. This highlighted the importance of perceived safety, incident severity, regulatory frameworks and corporate legacy in shaping public trust. Whilst cyber incidents no doubt erode trust in AVs, a combination of technological perception, regulatory scaffolding and corporate history critically impacts this. These insights are instrumental for stakeholders, from policymakers to AV manufacturers, in charting the course of AV assimilation successfully in future.

Enhancing Cybersecurity Awareness Training for Mitigating Human-Induced Cybersecurity Breaches

In a world where 95% of cybersecurity breaches are due to human error, and a rapidly evolving cybersecurity landscape, the effectiveness of employee’s proper security awareness stands as a pivotal concern [1]. Especially when the employees are the first line of defense for any organization. This highlights the importance of having robust cybersecurity awareness that is dynamic to face the ever-changing threats in the world. However, traditional employee security awareness training programs often fall short, perceived as dull, ineffective, and unable to keep pace with the dynamic cybersecurity landscape [2]. These shortcomings not only diminish engagement but also lead to decreased knowledge retention, rendering employees more vulnerable to cyber threats.

The Effects of IT Management Certification Type and Corporate Social Responsibility Performance on Investors’ Responses to Cybersecurity Breaches

ABSTRACT We investigate the joint effects of IT management certification type (for example, International Organization for Standardization (ISO) 27001 certification, the certification of a company’s Information Security Management System against the ISO 27001 standard, the leading international standard focused on information security) and CSR performance on investors’ responses to cybersecurity breaches. We find that the ISO 27001 certificate issued by an independent certification body serves as a proactive remedial strategy for reputation management and attenuates investors’ negative reactions following data breaches. However, the connection between the certification body that issues the certificate and the financial audit firm of the audited company may impair the effectiveness of the certificate serving as a remedial strategy for cybersecurity breaches. Similarly, superior CSR performance provides insurance-like protection and spillovers to reduce investors’ negative responses to cybersecurity breaches. We also provide some evidence suggesting that IT management certification type and CSR performance are likely substitutive mechanisms.

Cybersecurity Threats and Vulnerabilities in Online Banking Systems

The rapid expansion of online banking has introduced significant convenience and accessibility for consumers and financial institutions alike. However, it also brings a substantial increase in cybersecurity threats, making online banking systems prime targets for cybercriminals. This paper provides a comprehensive examination of the prevalent cybersecurity threats that online banking faces, including phishing attacks, malware, ransomware, man-in-the-middle (MITM) attacks, insider threats, and distributed denial-of-service (DDoS) attacks. We analyze these threats in-depth, exploring how each tactic is deployed to compromise security and exploit vulnerabilities within online banking systems. Moreover, this paper discusses specific vulnerabilities that exist in online banking platforms, such as weak authentication practices, insecure network connections, outdated software, and risks associated with third-party integrations. Through tables and graphical data, the paper offers a clear overview of the most common vulnerabilities and their prevalence, providing insights into how these weak points are exploited in the cyber landscape. The impact of such cybersecurity breaches on financial institutions is also considered, highlighting the consequences that follow a security breach, such as financial losses, reputational damage, regulatory fines, and customer distrust. The findings reveal that these impacts not only affect individual financial institutions but can also undermine public confidence in digital banking as a whole. Finally, the paper proposes several strategic defenses against these threats. Solutions include multi-factor authentication, end-to-end encryption, robust threat monitoring, regular security audits, and customer education initiatives, among others. Statistical data on the effectiveness of these strategies demonstrates their role in mitigating cyber risks and fortifying online banking systems against future attacks. This study concludes by emphasizing the critical need for continuous innovation in cybersecurity practices, as cyber threats continue to evolve in sophistication.

Design and Implementation of Tabletop Cybersecurity Simulation for Health Informatics Graduate Students.

Experiential learning through simulation allows students to apply didactic knowledge to real-world situations. Tabletop simulation allows for the exploration of a variety of topics, including cybersecurity in health care. Due to its low frequency, yet high-risk nature, simulation is a perfect educational modality to practice responding to a cybersecurity attack. As such, the authors designed and executed a tabletop cybersecurity simulation consisting of a prebriefing, four rounds of injects detailing potential cybersecurity breaches that students must address, and structured debriefings that included input from cybersecurity content experts. This simulation was performed in 2018, 2019, 2022, and 2023, during graduate Health Informatics (HI) students' residential visits. The simulation allowed opportunities for HI students to apply knowledge of cybersecurity principles to an unfolding tabletop simulation containing injects of scenarios they may encounter in the real world. Survey data were used to assess the students' perceptions of the simulation. Topics assessed included overall satisfaction, teamwork and communication, and length of the event. Additionally, in 2022 and 2023, data were collected on psychological safety and whether to include them in future HI residential visits. Eighty-eight graduate HI students took part in the cybersecurity simulation over four annual residential visits. Most students were satisfied with the event, found it valuable, and could see it impacting their future practice as informaticists. Additionally, students indicated high levels of psychological safety. Multiple students requested that additional simulations be incorporated into the curriculum. A tabletop cybersecurity simulation was utilized to allow HI students the ability to apply knowledge related to cybersecurity breaches to real-world examples. The simulation's best practices of prebriefing, psychological safety, and structured debriefing with expert feedback were emphasized in the simulation's design and implementation. Students found the simulation valuable and worth including in the curriculum.

SIRT: A distinctive and smart invasion recognition tool (SIRT) for defending IoT integrated ICS from cyber-attacks

With the rise of smart industries, Industrial Control Systems (ICS) has to move from isolated settings to networked environments to meet the objectives of Industry 4.0. Because of the inherent interconnection of these services, systems of this type are more vulnerable to cybersecurity breaches. To protect ICSs from cyberattacks, intrusion detection systems equipped with Artificial Intelligence characteristics have been used to spot unusual system behavior. The main research problem focused on this work is to guarantee ICS security, a variety of security strategies and automated technologies have been established in past literary works. However, the main problems they face include a high proportion of incorrect predictions, longer execution times, more complex system designs, and decreased efficiency. Thus, developing and putting in place a Smart Invasion Recognition Tool (SIRT) to defend critical infrastructure systems against new cyberattacks is the main goal of this project. This system cleans and normalizes the supplied ICS data using a unique preprocessing technique called Variational Data Normalization (VDN). Furthermore, a novel hybrid technique called Frog Leap-based Ant Movement Optimization (FLAMO) is applied to choose the most important and necessary features from normalized industrial data. Furthermore, the methodology of Weighted Bi-directional Gated Recurrent Network (WeBi-GRN) is utilized to precisely distinguish between genuine and malicious samples from information collected by ICS. This work validates and evaluates the performance findings using many assessment indicators and a range of open-source ICS data. According to the study's findings, the proposed SIRT model accurately classifies the different types of assaults from the industrial data with 99 % accuracy.

On how do Cybersecurity breaches affect consumer trust and behavior in the digital economy of India

.

A Proposed Secure Wearable Device Payment System Based on Blockchain Technology

Given that they are employed in several services, wearable technology is growing in popularity. The wristwatch gathers several types of personal information. Consumers may find gadgets convenient, but there are also security dangers that alert users to the possibility of cybersecurity breaches, device intrusions, and vulnerability-exploiting. Hacking may make the collected data visible since devices are vulnerable to assault. Issues with these devices include security flaws, Bluetooth troubles, and the absence of authentication and location tracking. The Internet of Things (IoT) includes wearable gadgets as cogs in the wheel that might have an effect on the banking and financial industries. Therefore, since blockchain technology has gained a lot of attention recently and is now one of the most popular ways to securely transfer data through decentralised peer-to-peer systems, it is imperative to employ its security capabilities on the existing IoT-based wearable payment system. A secure, decentralised transaction execution process is made possible by blockchain, an unchangeable ledger. It has a great reputation and more customers thanks to its complex yet safe technique. Based on blockchain technology, this research suggested a secure wearable device payment system.

Understanding cybersecurity breach contagion effects: The role of the loss heuristic and internal controls

In this study, we seek to provide insights into the conflicting findings from prior research about whether the consequences of a cybersecurity breach spillover to non-breached bystander firms in the same industry − a phenomenon known as contagion effects. When considering the implications of a breach for a bystander firm, we suggest investors will rely on the loss heuristic and thus view loss (profit) bystander firms as more (less) likely to suffer a similar breach in the future. This will lead to greater cybersecurity breach contagion effects for loss firms than for profit firms. Furthermore, we propose that internal control quality will mitigate contagion effects and to a greater extent for loss firms than for profit firms. To test our hypotheses, we use a sample of cybersecurity breaches and identify a sample of non-breached bystander firms in the same subindustry as the breached firms. Our findings support our predictions and help explain the mixed findings from research on cybersecurity breach contagion effects. Results should also be informative to boards of directors and firm management considering ways to minimize costs associated with contagion effects.

Ethical Implications of Cybersecurity Breaches and Data Privacy Violations

The increasing reliance on digital technology has led to a surge in cybersecurity breaches and data privacy violations. These incidents raise significant ethical concerns, impacting individuals, organizations, and society as a whole. This paper explores the ethical ramifications of such breaches, focusing on issues like privacy intrusion, potential harm to individuals, and the erosion of trust. It further examines the ethical obligations of organizations in data collection, storage, and security practices. Finally, the paper discusses potential solutions and approaches to mitigate these ethical concerns and promote a more responsible digital ecosystem Keywords:Cybersecurity, Data Privacy, Ethical Implications, Privacy Intrusion, Trust, Data Security

A comprehensive intrusion detection method for the internet of vehicles based on federated learning architecture

Cybersecurity breaches within the Internet of Vehicles (IoV) have been increasingly reported annually with the proliferation of intelligent connected vehicles. Two primary obstacles are faced by current intrusion detection systems: substantial computational demands and stringent data privacy regulations, complicating both efficient deployment and the safeguarding of data privacy. Consequently, there is a pressing need for intrusion detection solutions that are both efficient and considerate of privacy concerns. This paper introduces FED-IoV, an innovative intrusion detection method tailored for the IoV, leveraging a federated learning architecture. FED-IoV aims to collaboratively perform detection tasks across distributed edge devices, thereby minimizing data privacy risks. Vehicular communication traffic data is transformed into images, and a bespoke, efficient model, MobileNet-Tiny, is employed for feature extraction, rendering FED-IoV capable of achieving high detection accuracy whilst being viable for deployment on devices with limited resources. Through evaluation against the authoritative datasets CAN-Intrusion and CICIDS2017, exceptional accuracy rates of 98.51 % and 97.74 %, respectively, were demonstrated by FED-IoV within a federated learning context, and excellent detection capabilities on imbalanced datasets were also shown. Moreover, a prediction latency of under 10 milliseconds per sample was maintained on devices with limited computational power, such as the Raspberry Pi 4 8GB, showcasing significantly better accuracy and real-time performance relative to existing approaches. The successful deployment of FED-IoV ushers in a novel, privacy-preserving, and efficient intrusion detection solution for IoV security.

Need of Encryption Legislation: Protecting India’s Digital Realm and Beyond

Encryption is essential for protecting sensitive data, individual privacy and national security in a time of digital transition and growing cybersecurity threats. This article begins by highlighting the need for encryption laws in India, emphasising the growing reliance on digital technologies across sectors and the critical necessity of protecting digital assets. It proceeds to dissect the existing legal frameworks governing encryption and the enforcement challenges faced by regulatory agencies. A critical aspect of the research involves examining international perspectives on encryption legislations, drawing lessons from global approaches and discerning their relevance to India’s policy landscape. This article underscores the delicate balance between privacy and security concerns, particularly in the context of counterterrorism efforts. In addition, this research unravels case studies and incidents involving notable cybersecurity breaches in India, shedding light on the legal implications and consequences that follow such breaches. The study culminates with an exploration of the public opinion and stakeholders’ perspectives on encryption legislations, considering industry views and civil liberties concerns. It offers insights into the best practices for drafting effective encryption laws and provides recommendations to strengthen India’s digital resilience. It calls for proactive measures to secure India’s digital future while preserving individual freedoms and privacy rights.

Environmental, Social, and Governance Committees and Information Technology Outcomes

ABSTRACT With the recent increase in demand for environmental, social, and governance (ESG) reporting, more companies are creating board-level ESG committees to oversee progress in these areas. Companies are also becoming more aware of the important role that information technology (IT) can play in achieving ESG reporting goals. I argue that an improvement in ESG factors goes hand in hand with an improvement in IT. Specifically, I predict that companies with ESG committees will also benefit through an improvement in IT outcomes. Using a sample of companies from 2004 to 2022 I investigate two direct and two indirect IT outcomes. I find that environmentally and socially focused committees are negatively associated with both IT-related material weaknesses in internal controls and cybersecurity breaches. Further, companies with governance committees report fewer breaches and issue more accurate earnings forecasts. Conversely, I find that firms with environmental and social committees take longer to announce earnings. Data Availability: Data are available from the public sources cited in the text. JEL Classifications: G30; M40; O32.

Analyzing the urban–rural divide: the role of location, time, and breach characteristics in U.S. hospital security incidents, 2012–2021

This analysis describes how cybersecurity breaches vary between urban and rural hospitals, how they differ over time, and how they differ across different types and locations of breaches within hospitals. Utilizing data from the U.S. Department of Health and Human Services Office for Civil Rights on incidents from 2012 to 2021 that affected 500 or more individuals, we studied breaches in 237 community hospitals, distinguishing between 185 urban and 52 rural facilities. Using Poisson and Quasi-Poisson regression models, we found a significant yearly increase in data breaches, especially in urban hospitals. Hacking/IT incidents were the most common breaches, particularly prevalent in urban settings, while unauthorized access/disclosure occurred frequently. Email and network servers were the primary locations of breaches in urban and rural hospitals. These findings indicate differences between urban and rural hospitals in data security incidents, suggesting areas for further research.

Securing the green grid: A data anomaly detection method for mitigating cyberattacks on smart meter measurements

Smart meters, being a vital component in the advanced metering infrastructure (AMI), provide an opportunity to remotely monitor and control power usage and act like a bridge between customers and utilities. The installation of millions of smart meters in the power grid is a step forward towards a green transition. However, it also constitutes a massive cybersecurity vulnerability. Cyberattacks on AMI can result in inaccurate billing, energy theft, service disruptions, privacy breaches, network vulnerabilities, and malware distribution. Thus, utility companies should implement robust cyber-security measures to mitigate such risks. In order to assess the impact of cybersecurity breaches on AMI, this paper presents a cyber-attack scenario on grid measurements obtained via smart meters and assesses the stochastic grid estimations under attack. This paper also presents an efficient method for the detection and identification of anomalous data within the power grid by leveraging the distance between measurements and the confidence ellipse centered around the estimated value. To assess the proposed method, a comparative analysis is done against the chi-square test for detection and the largest normalized distribution test for the identification of bad data. Furthermore, by using a Danish low-voltage grid as a base case, this paper introduces two test cases to evaluate the performance of the proposed method under single and multiple-node cyber-attacks on the grid state estimation. Results show a notable improvement in accuracy when using the proposed method. Additionally, based on these numerical results, protective countermeasures are presented for the grid.

Entropy based network anomaly detection

an era of relentless cyber threats, the increasing complexity and volume of data significantly intensify the risk and impact of cybersecurity breaches. As organizations generate and store more data, the potential attack surface grows, providing more opportunities for malicious actors to exploit vulnerabilities. Consequently, there is a growing necessity for more advanced analytical techniques to effectively detect and mitigate these evolving threats. Shannon entropy, introduced by Claude Shannon in 1948, is a fundamental concept in information theory that measures the unpredictability or randomness of information. It serves as a primary tool for identifying unusual patterns within extensive datasets, offering a quantitative approach to detect anomalies This paper explores the application of Shannon’s Entropy to detect and prevent distributed denial-of-service (DDoS) attacks. Unlike traditional motif identification tools, which focus on recurring patterns within data, Shannon entropy provides a broader measure of randomness and can detect subtle variations that may indicate a security breach. By leveraging the entropy measure, cybersecurity systems can identify and respond to abnormal traffic patterns that signify a potential DDoS attack, thereby enhancing the robustness and reliability of data protection mechanisms

Essence and features of economic security of the industry sector

Ensuring the economic security of the industry sector and its element, energy security, is critical for the economies of countries, especially in the current environment of escalating military conflicts. The purpose of this study was to investigate the most likely risks to the security of the industrial sector, taking the example of the oil industry. The study employed the formal legal method, the method of qualitative textual analysis, the descriptive method, the method of statistical analysis, and the survey method. The study determined the place of energy security, specifically the security of the oil industry, in the system of economic security and emphasised its exceptional significance, especially in times of war. The principal global risks to the security of the oil industry were identified, including increased economic dependence for import-dependent countries and for countries dependent on oil exports; escalation of conflicts due to disagreements over resource control; and terrorist and cyberattacks. It was found that the main threats to Ukraine are generated by Russia’s invasion of its territory, which entails such critical risks as the physical destruction of oil industry facilities and cybersecurity breaches. The study confirmed that the war in Ukraine could have a substantial impact on the energy security of the European Union. This impact may result in the postponement of the association’s environmental goals due to the need to urgently ensure its own energy security. The study identified ways to improve security in the Ukrainian oil industry in times of war, including ensuring physical security and cybersecurity, developing crisis response plans, and improving the energy efficiency of the national industry. The findings of this study may be useful in developing measures to optimise energy policy