25 February 2025

On February 19, 2025, the European Internet Forum (EIF) hosted a breakfast debate titled “Cyber Resilience of European Healthcare: readiness of the sector” at the European Parliament. The event addressed the escalating cybersecurity threats to the healthcare industry, intensified by the COVID-19 pandemic, geopolitical tensions, and recent threat assessments by the European Union Agency for Cybersecurity (ENISA). The debate convened key cybersecurity regulators from the European Parliament and the European Commission, alongside national experts, to discuss pressing issues related to cybersecurity and the digital transformation of European healthcare.

42:00
Cyber resilience of European healthcare: readiness of the sector

EIF Chair Marina Kaljurand MEP, chairing the event, emphasized the increasing reliance on digital healthcare services and the shift towards patient control over medical data. She highlighted the European Commission’s cybersecurity action plan, introduced on January 15, which aims to bolster hospitals’ and healthcare providers’ ability to detect, prepare for, and respond to cyber threats. The urgency of strengthening cybersecurity measures was underscored, with both patient safety and data protection at stake.

Saila Rinne from the European Commission elaborated on the challenges of integrating digital health with cybersecurity. She described the necessity of collaboration between these two sectors, despite their differing priorities and technical languages. Digital healthcare solutions, while offering substantial benefits in addressing aging populations and rising medical costs, also present significant cybersecurity vulnerabilities. Ms Rinne pointed to key legislative initiatives, such as the European Health Data Space Regulation and the AI Act, which are designed to ensure that digital health data remains both secure and accessible. The prevalence of cyberattacks on hospitals, particularly ransomware incidents, was identified as a major concern. In response, the European Action Plan on healthcare cybersecurity was presented as a structured framework to address these risks through prevention, detection, response, and deterrence.

Belgium’s national cybersecurity response was outlined by Phedra Clouner, who detailed the growing number of cyberattacks on the country’s healthcare sector. She explained that patient data is highly valuable to cybercriminals, making hospitals frequent targets. Although Belgian hospitals had not been officially classified as operators of essential services, national authorities have introduced protective measures, such as early warning systems and incident response mechanisms. Belgium’s engagement with European cybersecurity networks was noted as a key factor in its strategy to reinforce resilience in the healthcare sector. Despite these efforts, ransomware attacks continue to disrupt medical services, often forcing hospitals to revert to paper-based systems and, in some cases, delaying critical patient care.

Jaanika Merilo shared Estonia’s extensive experience in digital healthcare, stressing that cybersecurity is fundamental to maintaining public trust in e-health systems. Estonia’s advanced digital infrastructure, she explained, facilitates secure data exchange among hospitals, clinicians, and pharmacies while ensuring that patients retain full control over their health records. Access control mechanisms play a crucial role in protecting sensitive data, allowing individuals to monitor who accesses their medical information. However, cybersecurity challenges persist, as demonstrated by recent breaches, including a cyberattack on a DNA biobank and a data leak involving a pharmacy’s client records. These incidents highlighted the need for robust security measures not only within government-operated healthcare systems but also among private healthcare providers, whose vulnerabilities could undermine trust in digital health solutions.

The discussion concluded with a shared recognition of the importance of cross-border cooperation in strengthening healthcare cybersecurity across Europe. As the EU progresses towards a more interconnected digital health ecosystem, ensuring the security of patient data across member states remains a top priority. 

Videos

  • 42:00 Cyber resilience of European healthcare: readiness of the sector
  • #EIFasks - MEP Beatrice Covassi on the impact of the Cyber Resilience Act
  • 7:33 Juan Jimenez, Santander on the economic and societal impact of tokenization
View more

Related content

European Internet Forum ©2025. All Rights Reserved.