IoT Device Security in Modern Healthcare: Addressing Cyber Threats to Connected Medical Equipment
Article Information
Publication Timeline
- Received20 August 2025
- Accepted21 September 2025
- Published
Abstract
The swift proliferation of Internet of Things (IoT) devices in healthcare, ranging from wearable monitors to interconnected infusion pumps, presents significant advantages while simultaneously posing critical cybersecurity threats. This study examines recent literature and documented case studies to pinpoint vulnerabilities in connected medical devices and suggest strategies for secure IoT healthcare. We use a thorough review of the literature and an analysis of published incident reports to group common attack vectors (like ransomware, data exfiltration, and denial-of-service) and find device vulnerabilities (like weak authentication, outdated firmware, and insecure protocols). We look at important countermeasures like encrypting data in transit, using zero-trust architectures, and using AI to find unusual patterns. Blockchain-based integrity checks and federated anomaly-detection models are two new solutions that are being talked about. The results combine advice from standards like HIPAA, GDPR, and NIST, and they stress the importance of layered security and lifecycle management. The conclusions underscore the ramifications for healthcare practice and policy, particularly the significance of device certification and staff training. They also propose future research avenues, including quantum-resilient cryptography and digital-twin simulations to anticipate IoT threats.
References
- ElSayed Z, Abdelgawad A, Elsayed N. Cybersecurity and frequent cyber attacks on IoT devices in healthcare: issues and solutions [Internet]. arXiv. 2025 [cited 2025 Oct 9]. arXiv:2501.11250. [Google Scholar][Crossref]
- Hern A. Hacking risk leads to recall of 500,000 pacemakers due to patient death fears [Internet]. The International Journal of Medical and All Body Health Research www.allmedicaljournal.com Guardian. 2017 Aug 31 [cited 2025 Oct 9]. Available from: https://www.theguardian.com/technology/2017/aug/31/hacking-risk-recall-pacemakers-patient-death-fears-fda-firmware-update [Google Scholar][Crossref]
- Lyon D. Making trade-offs for safe, effective, and secure patient care. J Diabetes Sci Technol. 2017;11(2):213-5. doi:10.1177/1932296816676281 [Google Scholar][Crossref]
- Mejía-Granda K, Ruales D, Mancilla-Galindo F, Núñez-Valdez E, Ortiz-Zea B. Security vulnerabilities in healthcare: an analysis of medical devices and software. Med Biol Eng Comput. 2024;62(1):257 -73. doi:10.1007/s11517-023-02912-0 [Google Scholar][Crossref]
- CompliancePoint. IoT cybersecurity in healthcare – mitigating the risk [Internet]. CompliancePoint; 2024 Jun 5 [cited 2025 Oct 9]. Available from: https://www.compliancepoint.com/healthcare/iot-cybersecurity-in-healthcare-mitigating-the-risk [Google Scholar][Crossref]
- Mane S, Singh Y. Advancements in AI, blockchain and IoT for healthcare and automation: comprehensive review [Internet]. ResearchGate; 2025 [cited 2025 Oct 9]. [Google Scholar][Crossref]
- Ansari MN, Tasleem N. AI in healthcare: transforming patient care, diagnosis, and treatment. J Artif Intell Gen Sci. 2024;6(1):727-44. [Google Scholar][Crossref]
- Armis Security. Chapter 3: A history of medical device hacking [Internet]. Armis Security; 2022 Nov 9 [cited 2025 Oct 9]. Available from: https://www.armis.com/blog/chapter-3-a-history-of-medical-device-hacking [Google Scholar][Crossref]
- Jain P, Singh P. Proposed healthcare network architecture: proposed IoT layers architecture for health care. [Journal Not Specified]. 2021. [Google Scholar][Crossref]
- ElSayed Z. Blockchain-based methods for securing IoT medical data. In: Enhancing privacy in IoT-based healthcare using provable partitioned secure blockchain principle and encryption. Lausanne: Frontiers Media; 2025. In: Front Blockchain. 2025;1(1). [Google Scholar][Crossref]
- NIST. Cybersecurity Framework (CSF) [Internet]. National Institute of Standards and Technology; 2018 [cited 2025 Oct 9]. Available from: https://www.nist.gov/cyberframework [Google Scholar][Crossref]
- FDA. Postmarket management of cybersecurity in medical devices [Internet]. U.S. Food & Drug Administration; 2016 [cited 2025 Oct 9]. Available from: https://www.fda.gov/media/95862/download [Google Scholar][Crossref]
- Herrmann E, Arslanian L. Enhancing healthcare data privacy in cloud IoT networks using anomaly detection and explainable AI. J Med Internet Res. 2023;25:e50321. [Google Scholar][Crossref]
- Cynerio Research. The state of healthcare IoT device security 2022. [Place unknown]: Cynerio; 2022. [Google Scholar][Crossref]
- HHS. Summary of the HIPAA Security Rule [Internet]. U.S. Department of Health & Human Services [cited 2025 Oct 9]. A vailable from: https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html [Google Scholar][Crossref]
- Dhillon SS, Syed A. Anomaly-based threat detection in smart health using machine learning. Int J Comput Sci Inf Secur. 2022;20(5):23-30. [Google Scholar][Crossref]
- Arslan L, Gaurav A, Khairuzzaman W. A layered security perspective on Internet of Medical Things. Int J Artif Intell Tools. 2024;33(1):2450021. [Google Scholar][Crossref]
- Kazi S. Enhancing IoT device security: Zero Trust in healthcare [Internet]. Cloud Security Alliance; 2023 [cited 2025 Oct 9]. [Google Scholar][Crossref]
- ISO/IEC 27001:2013. Information technology – Security techniques – Information security management systems – Requirements. Geneva: International Organization for Standardization; 2013. [Google Scholar][Crossref]
- IEC 80001-1:2021. Application of risk management for IT networks incorporating medical devices. Geneva: International Electrotechnical Commission; 2021. [Google Scholar][Crossref]
- HIPAA Security Rule (45 CFR Part 164 Subpart C) [Internet]. U.S. Department of Health & Human Services [cited 2025 Oct 9]. Available from: https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html [Google Scholar][Crossref]
How to Cite
Erukayenure, O., Bashir, H. A., Adekunbi, A., Esan, O. S., Adeniji, O. I., & Eyinfun, T. D. (2025). IoT Device Security in Modern Healthcare: Addressing Cyber Threats to Connected Medical Equipment. International Journal of Medical and All Body Health Research, 6(4), 49-57. https://doi.org/10.54660/IJMBHR.2025.6.4.49-57
Erukayenure, Oghenemena, et al. "IoT Device Security in Modern Healthcare: Addressing Cyber Threats to Connected Medical Equipment." International Journal of Medical and All Body Health Research, vol. 6, no. 4, 2025, pp. 49-57. https://doi.org/10.54660/IJMBHR.2025.6.4.49-57.
Erukayenure, O., Bashir, H. A., Adekunbi, A., Esan, O. S., Adeniji, O. I. and Eyinfun, T. D. (2025) 'IoT Device Security in Modern Healthcare: Addressing Cyber Threats to Connected Medical Equipment', International Journal of Medical and All Body Health Research, 6(4), pp. 49-57. doi: 10.54660/IJMBHR.2025.6.4.49-57.
Erukayenure O, Bashir HA, Adekunbi A, Esan OS, Adeniji OI, Eyinfun TD. IoT Device Security in Modern Healthcare: Addressing Cyber Threats to Connected Medical Equipment. International Journal of Medical and All Body Health Research. 2025;6(4):49-57. doi:10.54660/IJMBHR.2025.6.4.49-57
Similar Articles
- Genetic Diversity of Sickle Cell Disease in Nigeria: Implication for Emerging Gene Therapy and Health Equity Vol 6, Issue 4 (2025)
- Prevalence and Associated Risk Factors of Obesity from six to 16-year-old Children Vol 6, Issue 4 (2025)
- Challenges of Applying Evidence -Based Practice in Nursing: Subject Review Vol 6, Issue 4 (2025)
- Anesthetists’ Skills Concerning the Ten Rights of Medications Administration: An Observational Study Vol 6, Issue 4 (2025)
- Closing the Funding Gap: Accelerating Biochemical Research to Transform Postpartum Depression Care Vol 6, Issue 4 (2025)
Find this Article on
Google Scholar Semantic Scholar OpenAlex Scilit Crossref ResearchGate BASEA newly published article may take a few days to appear on these services.