SOCIAL ENGINEERING AS AN EVOLUTIONARY THREAT TO INFORMATION SECURITY IN HEALTHCARE ORGANIZATIONS

Abstract

Information security in healthcare settings is overlooked even though it is most vulnerable to social engineering attacks. It is critical to monitor thefts of hospital data as it contains patients’ confidential health information. If leaked, the data can impact patients’ social as well as professional lives. The hospital data system includes administrative data, as well as employees’ personal information, and if hacked, can lead to identity theft. The current paper discusses the types and sources of social engineering attacks in healthcare organizations. Social engineering attacks occur more frequently than other malware attacks, and hence it is crucial to understand what social engineering is, and its vulnerabilities, to stimulate preventive measures. The paper describes types of threats, potential vulnerabilities, and possible solutions to prevent social engineering attacks in healthcare organizations.