Surveillance malware (also known as “spyware”) enables cybercriminals to log keystrokes such as login credentials for healthcare systems. With this information, cybercriminals can remotely access the systems and exfiltrate ePHI to commit identity theft and healthcare fraud. Other types of malware can impact the availability of ePHI (for example ransomware) or corrupt data so it is unreliable.