Cyber-physical attacks against pharma supply chains are growing because attackers have figured out how to penetrate endpoint gaps between operations technology (OT) and IT systems. What makes these attacks so lethal is how they compromise the physical security of targets and immediately put the health of employees and patients at risk. Universal Healthcare Services says a malware attack in September 2020 has cost the chain $67 million and forced its hospitals to turn away ambulances and critical care patients.
The recent study Playing with Lives: Cyberattacks on Healthcare are attacks on People by the CyberPeace Institute provides insights into why and how cyber-physical attacks happen in pharma manufacturing, supply chains, and health care. One of the more severe recent attacks has been to Dr. Reddy’s Laboratories, a leading vaccine developer in India. A ransomware attack forced the developer to temporarily shut operations at its key plants in the United States, U.K., Brazil, India, and Russia due to suspected data leakage shortly after approval of the COVID-19 vaccine trial. Not having the COVID-19 vaccine available for millions of Indians has an incalculable cost in…