Healthcare Supply Chain Statistics

Supply chain attacks against healthcare organizations decreased significantly from 68% in 2024 to 44% in 2025.

44% of healthcare organizations say their organizations experienced an attack against its supply chains, which is a significant decline from 68% in 2024.

Healthcare organizations that experienced supply chain attacks, on average, experienced four supply chain attacks in the past two years.

57% of healthcare organizations say their organizations are very or highly vulnerable to supply chain attacks.

Business associates (including billing vendors, imaging firms, and outsourced IT providers) were involved in 17 of the 107 email-related breaches in healthcare. This represents 16% of all incidents.

68% of healthcare leaders cited third-party software as the top risk.

68% of healthcare leaders cited third-party software as the top risk.

Only 21% of healthcare executives say they are investing significantly in software supply chain security.

54% of healthcare executives say they have very low to moderate visibility into the software supply chain.