Many hospitals and clinics don't have these most basic security provisions. As noted in a
recent report to Congress by the Department of Health and Human Services' Health Care Industry Cybersecurity Task Force, "The majority of health delivery organizations lack full-time, qualified security personnel."
As a result, systems like the Siemens scanners are particularly at risk from cryptoransomware and other malware attacks that spread laterally on networks, because medical systems often share the same network as administrative systems. In such a setup, a click on an e-mail attachment or unpatched legacy Web server software could trigger a breach that could effectively shut hospitals down.