Commentary
Video
Brad Ash of ISMIE, joined by Nick Spano of Beazley and Jamie Donovan of ISMIE Mutual, details how cybercriminals are targeting healthcare — and what practices can do to protect patient data and financial stability.
Health care organizations have become prime targets for cybercriminals, with recent breaches exposing millions of patient records, disrupting claims processing and forcing hospitals offline.
In “Protecting Against Cyber Threats in Healthcare,” part of Medical Economics’ September 2025 Practice Academy, ISMIE leaders Brad Ash and Jamie Donovan, along with Beazley’s Nick Spano, walked physicians through the reality of rising ransomware and data breach risks — and the coverage strategies designed to mitigate them.
The speakers reviewed case studies from Change Healthcare’s record-breaking breach to the Lurie Children’s ransomware attack, underscoring how vulnerable even well-resourced systems can be. They explained why sensitive health data remains so valuable on the dark web and why small practices are no safer than sprawling hospital networks.
Their central message was twofold: first, prevention requires both technical safeguards and ongoing staff education; second, when breaches occur, comprehensive cyber liability coverage can make the difference between recovery and ruin.
ISMIE and Beazley outlined how coverage has evolved to include forensic recovery, legal defense, regulatory response and even reputational support — often at no extra cost for policyholders.
For physicians already stretched thin by patient care and administrative demands, the takeaway was clear: cybersecurity is not optional, and protecting a practice means pairing smart defenses with a partner who can respond when — not if — a breach happens.
Stay informed and empowered with Medical Economics enewsletter, delivering expert insights, financial strategies, practice management tips and technology trends — tailored for today’s physicians.