Tantangan Keamanan Siber di Sektor Kesehatan Indonesia
Healthcare adalah sektor #1 target ransomware dengan avg. ransom $4.4M
Nilai Tinggi Data Rekam Medis
Data rekam medis dijual di dark web dengan harga $250-$1000 per record—50x lebih mahal dari credit card. Berisi identitas lengkap (KTP, BPJS), riwayat penyakit, dan data asuransi yang digunakan untuk medical identity theft dan insurance fraud.
Legacy Medical Devices & IoMT
Rumah sakit mengoperasikan ribuan Internet of Medical Things (IoMT)—MRI machines, infusion pumps, patient monitors—dengan OS outdated (Windows XP/7) yang tidak bisa di-patch tanpa void warranty. Entry point ideal untuk attackers.
Critical 24/7 Operations
Tidak seperti industri lain, rumah sakit tidak bisa shutdown untuk maintenance. Patching windows terbatas, monitoring harus non-disruptive, dan setiap downtime mengancam nyawa—membuat security posture sulit dioptimalkan.
Kompleksitas Ekosistem & Akses
Ratusan dokter, perawat, staff admin, vendor medical equipment, third-party lab, pharmacy, dan asuransi memerlukan akses ke sistem. Sulit enforce strong access control tanpa menghambat patient care workflow.
Ancaman Siber terhadap Data & Sistem Medis
Healthcare Ransomware
89% rumah sakit mengalami ransomware attacks. Encryption HIMS, EHR, PACS (radiologi), LIS (lab) memaksa shutdown layanan, delayed surgeries, dan patient diversions. Attackers demand $4-10M ransom karena tahu hospital akan membayar untuk save lives.
Recent Cases:
- • RS XYZ Jakarta: 21 hari downtime, $3M loss
- • BPJS Kesehatan: 280M records breach
- • Network hospital: 6 locations hit simultaneously
- • Medical devices locked by Ryuk ransomware
Patient Data Breach & PHI Theft
Pencurian Protected Health Information (PHI)—diagnosis, treatment history, medication records, test results, insurance data. Sold on dark web atau digunakan untuk blackmail patients (penyakit sensitif), medical identity theft, dan fraudulent insurance claims.
PHI Contains:
- • Identitas lengkap (KTP, NIK, BPJS)
- • Riwayat penyakit & diagnosis
- • Resep obat & alergi
- • Hasil lab & imaging
- • Data finansial & asuransi
Medical Device Compromise
Hacking medical devices—infusion pumps (drug overdose), ventilators, pacemakers, insulin pumps, CT/MRI machines. Vulnerabilities di firmware atau network connectivity memungkinkan attackers manipulate device settings, causing direct patient harm.
Vulnerable Devices:
- • Insulin pumps & infusion devices
- • Ventilators & anesthesia machines
- • Patient monitors (vital signs)
- • Imaging equipment (MRI, CT, X-Ray)
- • Lab analyzers & diagnostic tools
Healthcare Insider Threats
Dokter, perawat, atau staff admin dengan legitimate access yang menyalahgunakan privileges: snooping celebrity medical records, selling patient data, atau accidental data leakage via unsecured email/USB. Sulit detect karena authorized activity.
Insider Scenarios:
- • Unauthorized EMR access (curiosity/malice)
- • Patient data theft for financial gain
- • Accidental PHI disclosure via email
- • Lost/stolen laptops with patient data
- • Credential sharing among staff
Phishing & Social Engineering
91% cyber attacks dimulai dari phishing. Healthcare workers—busy dengan patient care—mudah jatuh korban fake emails dari "hospital admin", "medical suppliers", atau "insurance companies" yang install malware atau steal credentials untuk masuk ke EHR system.
Phishing Tactics:
- • Fake "urgent patient update" emails
- • COVID-19 related phishing campaigns
- • Malicious attachment (fake lab results)
- • Credential harvesting login pages
- • BEC targeting billing departments
DDoS & Service Disruption
DDoS attacks melumpuhkan patient portals, telemedicine platforms, appointment systems, dan internal HIMS access. Menghentikan online registrasi, e-prescriptions, dan remote consultations—forcing patients to come in-person saat capacity terbatas.
Target Services:
- • Patient portals & mobile apps
- • Telemedicine & video consultation
- • Online appointment scheduling
- • Pharmacy ordering systems
- • Lab results delivery platforms