Abstract
Healthcare organisations have become increasingly dependent on digital technologies since the COVID-19 pandemic. While these advancements improve patient care and operational efficiency, they also expose healthcare institutions to heightened risks of cyberattacks. The sector faces significant threats from ransomware, phishing, data breaches, and denial-of- service attacks due to this reliance on technology. This study investigates the impact of cyberattacks on South Africa’s healthcare sector, focusing on the period from 2020 to 2024, and explores their effects on information security and business continuity. Cyberattacks during this period have had severe consequences, including compromised patient data, operational disruptions, and financial losses. The pandemic exacerbated these vulnerabilities, highlighting gaps in the healthcare sector's ability to protect sensitive information and sustain operations during crises. Using qualitative content and document analysis, the study examined publicly available information to assess incidents involving major South African healthcare organisations, such as Life Healthcare Group, Dis-Chem, and the National Health Laboratory Service (NHLS).
Findings reveal that outdated IT systems, insufficient cybersecurity measures, and inadequate staff training contribute to the sector’s vulnerabilities. Furthermore, the lack of robust business continuity plans undermines the sector’s ability to recover effectively from cyber incidents. The study underscores the urgent need to address these weaknesses by implementing enhanced incident response mechanisms, comprehensive cybersecurity training, and stronger business continuity planning. By addressing these critical areas, South Africa’s healthcare sector can better safeguard patient data and ensure uninterrupted service delivery in the face of cyber threats.