Clalit and Check Point Partner to Secure AI Use in Hospitals
Clalit, one of Israel's largest healthcare providers, has partnered with cybersecurity firm Check Point to develop a joint system for securing the use of artificial intelligence (AI) in hospitals. The multi-million shekel strategic partnership aims to create an "AI Gateway" product, a security layer that will monitor information flow between medical systems and external AI tools in real-time.
The initiative addresses the growing tension between the desire to leverage AI tools like ChatGPT and Gemini for medical efficiency and the increased vulnerability of digitized healthcare systems. Avivvit Kotler, Clalit's national data and cyber protection officer, highlighted the surge in cyberattack attempts, particularly from Iran and its proxies, noting hundreds of thousands of attacks annually. A significant turning point was the ransomware attack on Hillel Yaffe Medical Center, which led to stricter regulations from the Ministry of Health.
Clalit already utilizes AI internally for tasks such as managing medical imaging algorithms and identifying undiagnosed diseases, operating within controlled, isolated environments. However, the integration of free generative AI applications introduces new risks, such as the potential for sensitive patient data to leak if accidentally copied into public AI engines by medical staff. The "AI Gateway" is designed to prevent such breaches, enforce privacy laws, and establish clear safety boundaries.
The system will also monitor and block anomalous activities from "AI agents" and third-party applications that integrate with hospital systems, preventing them from accessing or transmitting sensitive data beyond their designated tasks. Clalit is providing Check Point with a large-scale development and implementation environment, serving its 5 million members. Check Point will retain intellectual property rights with the goal of future commercialization of the platform.
Kotler assured that patient data would remain with Clalit, with Check Point only accessing metadata. The system is projected to be widely deployed and operational by the first quarter of 2027.
