title: Cyber threats to health information systems: A systematic review.
abstract: BACKGROUND
  Recent legislation empowering providers to embrace the electronic exchange of health information leaves the healthcare industry increasingly vulnerable to cybercrime. The objective of this systematic review is to identify the biggest threats to healthcare via cybercrime.
  
  
  OBJECTIVE
  The rationale behind this systematic review is to provide a framework for future research by identifying themes and trends of cybercrime in the healthcare industry.
  
  
  METHODS
  The authors conducted a systematic search through the CINAHL, Academic Search Complete, PubMed, and ScienceDirect databases to gather literature relative to cyber threats in healthcare. All authors reviewed the articles collected and excluded literature that did not focus on the objective.
  
  
  RESULTS
  Researchers selected and examined 19 articles for common themes. The most prevalent cyber-criminal activity in healthcare is identity theft through data breach. Other concepts identified are internal threats, external threats, cyber-squatting, and cyberterrorism.
  
  
  CONCLUSIONS
  The industry has now come to rely heavily on digital technologies, which increase risks such as denial of service and data breaches. Current healthcare cyber-security systems do not rival the capabilities of cyber criminals. Security of information is a costly resource and therefore many HCOs may hesitate to invest what is required to protect sensitive information.
authors.forename: Raul
authors.initials: R
authors.lastname: Luna
authors.forename: Emily
authors.initials: E
authors.lastname: Rhine
authors.forename: Matthew
authors.initials: M
authors.lastname: Myhra
authors.forename: Ross
authors.initials: R
authors.lastname: Sullivan
authors.forename: Clemens Scott
authors.initials: CS
authors.lastname: Kruse
mesh_terms: D016494:Computer Security / Q000592:standards*; D057286:Electronic Health Records / Q000592:standards*; D063005:Health Information Systems / Q000592:standards*; D006801:Humans; D063867:Identity Theft / Q000517:prevention & control*; D023481:Terrorism; D014481:United States
keywords: Cyber threats; cyber security; cyber terrorism; cybercrime; external threats; internal threats