How do cyberattackers gain access to health systems? Often via smaller hospitals

Smaller hospitals are often targeted by cyberattackers and nation states to gain access to health system networks, steal intellectual property (IP), deploy ransomware, or sell data on the dark web. This is because smaller hospitals are often part of larger health systems with larger attack surfaces and fewer cybersecurity resources. Health systems can mitigate this risk by discovering, testing, and remediating vulnerabilities in their smaller entities and using dedicated attack surface management solutions.