Cyber-resilient Intensive Care Unit: Ransomware is a Patient-safety Crisis-A Resource-stratified Approach for India.

Abstract

Ransomware and cyber incidents targeting hospital digital infrastructure have emerged as genuine patient-safety threats yet remain under-recognized in critical care practice. Intensive care units (ICUs) are uniquely vulnerable: Physiological states are tightly coupled to digital workflows, electronic health records (EHRs) anchor medication safety, and dense Internet of Medical Things (IoMT) environments expand the attack surface. India faces a compounded risk-the 2022 All India Institute of Medical Sciences (AIIMS) Delhi ransomware attack exposed fragmented systems, an absence of post-incident clinical surveillance, and the operational reality that "Western" cybersecurity fixes do not translate directly to resource-variable settings. This Viewpoint reframes cyber-resilience as a bedside safety competency rather than an information technology (IT) concern and proposes a resource-stratified three-tier preparedness framework. Tier 1 defines minimum viable controls achievable by any ICU: Downtime kits, paper medication administration records (MARs), designated roles, and structured drills. Tier 2 adds targeted redundancy; tier 3 outlines advanced capabilities for tertiary centers. When digital systems fail, patient survival depends on analog competencies practiced before the crisis.

How to cite this article: Choudhuri B, Prakash J, Pal B, Veenith T. Cyber-resilient Intensive Care Unit: Ransomware is a Patient-safety Crisis-A Resource-stratified Approach for India. Indian J Crit Care Med 2026;30(5):363-367.