{"id":2660,"date":"2026-10-20T08:53:32","date_gmt":"2026-10-20T08:53:32","guid":{"rendered":"https:\/\/the-s-unit.nl\/?page_id=2660"},"modified":"2026-11-06T21:23:08","modified_gmt":"2026-11-06T21:23:08","slug":"healthcare","status":"publish","type":"page","link":"https:\/\/the-s-unit.nl\/en\/sectors\/healthcare\/","title":{"rendered":"Healthcare"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Security with patient care at stake<\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Healthcare is about people. When critical systems become unavailable or sensitive patient data is compromised, the impact goes beyond IT. We explore the attack paths that could disrupt care or expose patient data. <\/p>\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tFind out how we attack <\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tDiscuss your challenge<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Protecting a healthcare environment built on access and trust\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Healthcare organisations are generally large, complex environments where people, technology and care are closely connected. <\/p>\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

Thousands of employees and freelancers need access to systems and sensitive information to do their jobs, often across different locations and with many external partners. At the same time, healthcare professionals are trained to help people, not to question every request.

And while an organisation is under attack, care still needs to continue. Ransomware and supply chain attacks pose a growing threat to healthcare organisations. This puts both patient data and continuity of care at risk. NEN 7510, GDPR and the Dutch Cybersecurity Act reflect these risks, with patient safety at the centre.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

The security challenges in the Healthcare sector<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Security in healthcare requires 24\/7 risk management in a complex environment. A cyberattack can block access to patient records, disrupt treatments and expose sensitive data, potentially putting patient safety at risk.\n<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/metadata><\/g><\/rect><\/clipPath><\/defs><\/path><\/g><\/g><\/g><\/path><\/g><\/g><\/g><\/g><\/g><\/svg>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tThe culture of helping as securityrisk\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tHealthcare professionals operate on trust, often under time pressure. Attackers exploit that trust and urgency through phishing, impersonation and other forms of social engineering to find a way into the organisation.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/metadata><\/g><\/rect><\/clipPath><\/defs><\/path><\/g><\/g><\/g><\/path><\/g><\/g><\/g><\/g><\/g><\/svg>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tLegacy systems increase the attack surface\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tMany healthcare organisations still depend on outdated systems and medical technology that cannot easily be updated or replaced. As threats evolve, known vulnerabilities remain exposed, increasing the risk of data breaches, disruption of care and regulatory penalties.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/metadata><\/g><\/rect><\/clipPath><\/defs><\/path><\/g><\/g><\/g><\/path><\/g><\/g><\/g><\/g><\/g><\/svg>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tThird-party suppliers are part of the attack surface\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tEHR integrations, laboratories, medical technology, cloud platforms and external IT service providers are closely connected to healthcare environments. A compromised account or a vulnerable supplier connection can provide attackers with a path to critical systems.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/metadata><\/g><\/rect><\/clipPath><\/defs><\/path><\/g><\/g><\/g><\/path><\/g><\/g><\/g><\/g><\/g><\/svg>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tRegulations require demonstrable cyber resilience\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tRegulations and standards such as the GDPR, Wabvpz, NEN 7510 and the Dutch Cybersecurity Act require organisations to demonstrate effective management of information security risks. For CISOs, the challenge lies in translating these requirements into measures that genuinely protect patient data and ensure continuity of care.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Offensive security for Healthcare<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

We help healthcare organisations protect patient data, critical systems and availability of care by testing how people and technology withstand real attacks, while addressing the risks and regulations healthcare leaders need to manage.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t