Cyber Attacks on Hospitals: When Digital Risks Can Cost Lives
Germany is in the digital crosshairs. As the renowned Hasso Plattner Institute (HPI) warns, hospitals in particular are increasingly becoming targets of cyber attacks. The consequences: postponed operations, blocked supplies, damages amounting to millions – and endangerment of patients.
Dangerous Development: 74% More Successful Attacks
According to the current HPI analysis "Cybersecurity Alarm Signal: How Vulnerable is Germany Really?", successful attacks on hospitals increased by a full 74% between 2020 and 2024. Hospitals in Ludwigslust and Hagenow (February 2025), among others, were particularly affected. These figures are not outliers – they represent a worrying trend.
Hospitals as Easy Targets
Why hospitals? The digitization of medicine is progressing, but many facilities are lagging behind in IT security. Outdated systems, unclear responsibilities, and a lack of emergency plans make clinics easy prey for cybercriminals and state-sponsored hackers.
The Two Faces of Attackers
According to HPI, attackers come from two camps:
- Cybercriminals who encrypt data and demand ransom.
- State actors who specifically attack infrastructure to sow uncertainty – often as part of hybrid warfare.
Hybrid Warfare: Russia in Focus
Since the beginning of the war in Ukraine, HPI has observed a massive increase in state-orchestrated attacks from Russia. These attacks are part of a geopolitical strategy: the West is to be destabilized by cyberattacks. Clinics are only one part of the target – banks, transport, and energy systems are also affected.
Concrete Impacts in Clinics
The consequences of successful attacks are severe:
- Postponed Operations: Patients have to wait for weeks.
- IT Failure: Important systems for patient management no longer function.
- Costs: The economic consequences amount to millions.
- Loss of Image: Public trust suffers.
Professor Christian Dörr (HPI): Protection is Being Breached
HPI cybersecurity expert Prof. Christian Dörr warns: "We see that hackers are getting better and better at circumventing existing protective mechanisms such as firewalls. Many facilities are falling behind."
What Germany Must Do Now
HPI demands a rethinking by federal, state, and local governments:
- Comprehensive security measures, not isolated solutions
- Binding standards for critical infrastructure
- Central responsibilities with decision-making power
- Better training and sensitization of personnel
Conclusion: No Time for Digital Naivety
Cyber attacks on hospitals are no longer a science fiction scenario, but a bitter reality. Those who do not act now risk not only data loss but human lives. Security is not an option – it is a duty.
