Why is Finnish Healthcare Doing So Well Against Ransomware? @FIRSTdotorg
Why is Finnish Healthcare Doing So Well Against Ransomware?  @FIRSTdotorg
Uploaded August 2025 | Updated September 2026, 1 hour ago
Perttu Halonen (National Cyber Security Centre Finland, FI)

Mr Perttu Halonen, senior specialist, the National Cyber Security Centre Finland (NCSC-FI). Perttu has worked as healthcare cyber security liaison at the NCSC-FI since 2017, and facilitates the operation of Finnish social services and healthcare information sharing and analysis centre SOTE-ISAC.
--
Healthcare cyber security is a major topic, especially because of proliferation of ransomware, and cyber criminals deliberately targeting such attacks against healthcare delivery organisations. Meanwhile, Finnish healthcare providers are doing surprisingly well in terms of ransomware incidents: none reported since the year 2017. It's not clear why is it so. Ransomware incidents have become commonplace in Finnish society, and the good situation in healthcare stands out even inside Finland. In this presentation we study which kind of cyber security challenges do Finnish healthcare providers face, how is cyber security managed in the Finnish healthcare system, and how does the Finnish way compare to approaches in some other European countries. The presentation provides useful insights for policymakers, national level CSIRTs and cyber security managers.
Why is Finnish Healthcare Doing So Well Against Ransomware?The Funny Story of Active Directory BackdooringPivoting To Resilience: Disruptive Incidents And How We Prepare For ThemLessons From NPMs Dark Side: Preventing the Next Shai-HuludThe CVE Blind Spot: Defeating Hidden EOLs and Repo Jacking with Engineering Triage & Code DietAll Ransomware Economic Models are Wrong, But This One is UsefulCISA-ENISA Joint MessagingPanel: From Takedown to Touchpoint: An Inside Look at the Data-sharing Pipeline in the Victim ...Bringing Actionable Data to Internet DefendersUnlocking Insights: The Role of TI in Modern DFIR OperationsThe Quality Era of CVE: A Blueprint for Global Software SafetyBattle-Tested Incident Recovery: Lessons from the Front Lines
FIRST |

Why is Finnish Healthcare Doing So Well Against Ransomware?

SHARE TO X SHARE TO REDDIT SHARE TO FACEBOOK WALLPAPER