23 Daily — According to itmedia.co.jp, Japan's Ministry of Health, Labour and Welfare plans to significantly enhance cybersecurity measures for medical institutions in fiscal year 2027. The initiative aims to prevent long-term impacts on medical care caused by ransomware attacks, reflecting the critical importance placed on securing key industry data and services.
Substantial Increase in Cybersecurity Budget for Medical Institutions
The ministry has requested an estimated budget of 13.7 billion yen for medical institution cybersecurity enhancements in fiscal year 2027, a large increase compared to the 100 million yen allocated in the initial 2026 budget. This indicates heightened governmental concern about threats such as unauthorized access and ransomware attacks affecting both private companies like GMO Internet Group and medical facilities.
Reports highlight that medical institutions face similar cyber threats as private companies, underscoring the necessity to maintain stable healthcare service provision through stronger security measures.
Cybersecurity Challenges and Risks in Medical Institutions
Ransomware attacks can disable electronic medical records and other systems, leading to prolonged disruptions in medical services. Surveys by the ministry reveal that many hospitals have multiple external network connection points, such as maintenance VPN devices, which are hard to monitor and manage. There is also a shortage of cybersecurity professionals within these institutions.
An incident in February at Nippon Medical School Musashikosugi Hospital, where personal information of approximately 130,000 patients and staff was leaked, was traced to vulnerabilities stemming from neglected connection points. This case highlights the cybersecurity weaknesses and attack routes in hospitals.
Comprehensive Support to Strengthen Medical Cybersecurity
In fiscal 2027, the ministry will support comprehensive strengthening of cybersecurity in medical institutions from manpower, organizational, and system aspects. The measures include consolidating external connection points for more efficient management, utilizing expert personnel lists compiled by the Information-technology Promotion Agency (IPA), and assisting with initial responses when cybersecurity incidents occur.
Editor's take: Medical Cybersecurity Enhancements Open Entrepreneurial Opportunities
These initiatives not only safeguard long-term stable medical services but also create new markets in healthcare cybersecurity. Entrepreneurs can focus on tools for managing hospital network connections, cybersecurity monitoring systems, platforms for specialist personnel matching, and incident response solutions tailored to healthcare.
To validate the market potential, startups could survey targeted hospitals to assess their number of network connection points, management challenges, and cybersecurity expertise gaps. Pilot projects offering system integration or personnel services would provide insights on effectiveness and demand feedback.