CYBERCRIME IN THE HEALTHCARE SECTOR: THE RESPONSE TO DISCLOSURES

Abstract

Beyond traditional ransomware that restricts access to the targeted data, the healthcare sector faces a more insidious cybercriminal threat: doxware or ransomware 2.0, which threatens to reveal sensitive information. This new form of attack raises significant ethical considerations, especially in the delicate context of health data. The article examines the possibility of justifying the payment of ransoms in certain situations to protect the paramount interest of patients. It offers an in-depth analysis of this utilitarian approach in terms of legal, economic, and ethical implications, comparing it to a perspective where this payment would be categorically prohibited on deontological grounds. Importantly, the article argues for a tailored and flexible response to each incident in conjunction with regulatory authorities and insurers, avoiding a dogmatic approach to these complex dilemmas.