Cybersecurity isn’t just a technical concern. It’s a critical pillar for keeping our healthcare systems running smoothly and preserving patient safety. That’s a responsibility I don’t take lightly.
Over the past few years, we’ve all seen how vulnerable the healthcare sector can be. Massive events like the Change Healthcare ransomware attack and the CrowdStrike IT outages have sent shockwaves through the industry. These incidents didn’t just disrupt operations; they put patient lives and trust on the line. I think we’d all agree that the stakes are simply too high to ignore.
With cyberattacks coming faster and harder, it’s time we take a closer look at how we can strengthen our defenses. By working together, we can ensure that our healthcare systems remain resilient even in the face of the toughest challenges.
What makes healthcare a prime target?
Unfortunately, the healthcare industry remains one of the most targeted sectors for cyberattacks. In 2024, roughly 700 data breaches affected healthcare in the U.S., with a record-breaking total of 184 million breached records. Our reliance on legacy IT systems, third-party vendors, and interconnected technologies creates plenty of opportunities for bad actors. On top of that, the sensitive data we handle—from personal patient records to financial information and critical medical research—makes us an obvious target for cybercriminals.
Take the Change Healthcare ransomware attack, for example. Ninety-four percent of U.S. healthcare providers felt the impact of that single cyber event. It wasn’t just a localized issue; its effects rippled across our entire industry. These kinds of attacks not only threaten operational continuity; they also jeopardize patient safety on a massive scale.
And as promising as emerging tech like generative AI might be for improving our processes, it also equips cybercriminals with new tools to amplify their attacks. This creates an arms race of sorts that we need to stay ahead of.
Why we need to stop fighting alone
Here’s what I believe is one of the biggest hurdles we face as an industry: too often, we tackle these challenges in isolation. But cybersecurity isn’t a competition; it’s about protecting the well-being of our patients above all else.
What if, instead of working in silos, organizations came together to share knowledge, resources, and strategies? A ransomware attack that takes down one healthcare provider’s systems could be an opportunity to help a neighbor, rather than a moment to one-up them. Collaboration doesn’t just make sense; it’s essential for faster recovery and a more unified defense against attackers. When we prioritize teamwork—whether that’s between hospitals, insurers, vendors, or government agencies—we move the needle toward stronger security measures. None of us can fight these bad actors alone, but together, we can create real progress.
Proactive protection starts with “security by design”
Patchwork fixes simply won’t cut it anymore. Instead of plugging holes after vulnerabilities are exploited, it’s time to embed security by design into every aspect of our systems. This means building security into technology right from the start, rather than adding it as an afterthought.
For healthcare organizations, this requires implementing technologies that not only optimize care but also come configured with strong security measures such as multi-factor authentication and encryption. By designing systems with these safeguards in place, we can limit vulnerabilities and reduce the risk of exploitation. Vendors play a huge role, too, by stepping up as trusted partners to deliver secure-by-default tools. Anything less creates cracks that cybercriminals will undoubtedly exploit.
Preparedness is also key. Having robust backup systems, clearly defined incident response plans, and regular security drills equips organizations to mitigate the disruption caused by cyber incidents. These measures ensure that operations remain as steady as possible, even during a breach.
As industry leaders, we need to prioritize modernizing legacy systems, bolstering continuity plans, and adopting smarter, more secure technologies.
Why leadership needs to drive cybersecurity
One thing I’ve learned in my career is that cybersecurity can’t fall on the IT team alone. This is an issue that needs to matter at all levels, especially among CEOs and board members. Leadership sets the tone for how seriously an organization prioritizes managing risk and responding to incidents.
It begins with understanding what systems are critical for patient care. What would happen if these systems went down for an hour? Or even a day? I encourage organizations to conduct regular cyber risk assessments and business impact analyses to identify those mission-critical pieces. By focusing resources where they matter most, we can minimize the disruption caused by an attack and ensure operations recover as quickly as possible.
Preparation is everything. This means having contingency plans ready for the worst-case scenario—like systems going offline for days or even weeks. It’s not about being fearful; it’s about being ready.
The cost of standing still
Healthcare data breaches cost far more than money. Yes, the average breach in our industry is nearly $10 million, far outpacing sectors like financial services at $6 million. But beyond the dollars, breaches cost something even greater—trust. Patients count on us to protect their most sensitive information and safeguard their care.
I’ve seen so much encouraging progress lately. Increased investments and heightened awareness show that the healthcare industry is recognizing the gravity of these risks. But we still have a long way to go.
If we push forward with a shared sense of responsibility, adopting security-first mindsets, and fostering partnerships, I believe we have the chance to build something much stronger. Together, we can create a healthcare system that stands up to these relentless cyber threats while reassuring patients that their safety and data are in good hands.
