January 18, 2022 -- PLYMOUTH MEETING, PA—ECRI, an independent, nonprofit organization that provides technology solutions and evidence-based guidance to healthcare decision-makers worldwide, lists cybersecurity attacks as the top health technology hazard for 2022 in its just-released annual report.

Cybersecurity incidents can disrupt more than business operations, warns the nation’s largest federally designated patient safety organization—they can disrupt patient care, and thus pose a real threat of physical harm. All healthcare organizations are subject to cybersecurity incidents, cites ECRI in its report.

“The question is not whether a given facility will be attacked, but when,” says Marcus Schabacker, MD, PhD, president and chief executive officer of ECRI. “Responding to these risks requires not only a robust security program to prevent attacks from reaching critical devices and systems, but also a plan for maintaining patient care when they do. ECRI’s new guidance can help leaders be better prepared to protect their facilities and keep patients safe.”

Healthcare providers today depend on network-connected medical devices and data systems to deliver safe and effective patient care. A cybersecurity incident that compromises those devices or systems could lead to the rescheduling of appointments and surgeries, the diversion of emergency vehicles, or the closure of care units or even whole organizations—all of which could put patients at risk.

During the past five years, ECRI's healthcare recall, hazards, and cyber alert notification service has included 173 medical device cybersecurity alerts; 13 of those have been cybersecurity-related FDA recalls. Affected devices and systems include MRI systems, physiologic monitors, infusion pumps, and lab analyzers.

“ECRI remains committed to building awareness about technology hazards to keep patients safe, especially for those technologies that may not have gotten the needed attention during the pandemic,” adds Schabacker.

ECRI’s Top 10 Health Technology Hazards for 2022 are as follows:

1. Cybersecurity Attacks Can Disrupt Healthcare Delivery, Impacting Patient Safety
2. Supply Chain Shortfalls Pose Risks to Patient Care
3. Damaged Infusion Pumps Can Cause Medication Errors
4. Inadequate Emergency Stockpiles Could Disrupt Patient Care during a Public Health Emergency
5. Telehealth Workflow and Human Factors Shortcomings Can Cause Poor Outcomes
6. Failure to Adhere to Syringe Pump Best Practices Can Lead to Dangerous Medication Delivery Errors

U.S. Healthcare Homepage