Telehealth platforms in Africa must prioritise data protection to secure sensitive patient information and ensure the continued growth of digital healthcare, the Cyber Security Engineer at ESET East Africa, Allan Juma, has said.
According to a statement on Wednesday, Juma explained that telehealth services are vital for the 615 million people in Africa who lack access to basic healthcare, as these platforms connect rural patients with doctors located thousands of miles away.
However, he warned that virtual consultations generate and store large volumes of sensitive data, including health records, test results, and treatment plans, making them attractive targets for cybercriminals.
He emphasised that telehealth providers need to invest in advanced cybersecurity measures and educate both healthcare practitioners and patients on best practices for digital safety.
Juma noted that telehealth platforms often integrate with existing healthcare systems such as electronic health records, patient management systems, hospital infrastructure, and third-party vendors, which, while improving diagnosis and treatment efficiency, also increase security complexities.
According to Juma, the interconnected nature of these systems means a vulnerability in one area can lead to wider breaches across the entire healthcare ecosystem.
He cited risks like patients or healthcare workers using insecure connections or compromised devices, which could expose networks to cyberattacks.
To mitigate these risks, Juma recommended adopting a zero-trust security approach based on the principle of “never trust, always verify.” This includes mandatory multi-factor authentication and role-based access controls for all users, healthcare providers, administrators, and patients alike. The approach involves segmenting networks into smaller parts with tight access controls to limit the potential damage of any breach.
While zero-trust architecture reduces the chance of breaches, Juma acknowledged it cannot completely eliminate human error.
He warned that cybercriminals often exploit trust in healthcare professionals or use fraudulent communications to trick individuals into revealing sensitive information or clicking malicious links. Such attacks could lead to ransomware threats or interruptions in real-time communication, which are especially dangerous in critical care scenarios.
Juma stressed the importance of cybersecurity training for both healthcare workers and patients to guard against these threats. He concluded that by building robust cyber defenses and promoting education, telehealth providers in Africa can protect patient data and allow healthcare professionals to focus on delivering lifesaving care.
