Report by EY

US Healthcare Cyber Resilience Survey

9 FINDINGSPublished Nov 5, 2025
View Original Report →

Key Findings

68% of healthcare executives indicated that identity and access management would be the top priority for increasing investments in the coming fiscal year.

Identity and access managementHealthcareInvestmentBudget

81% of healthcare executives believe that prioritizing cybersecurity in their business strategy is effective in overcoming challenges.

HealthcareCybersecurityBusiness strategy

59% of healthcare organizations faced clinical consequences from cyber incidents, including delayed treatments and compromised patient trust.

HealthcareCyber incidentCyber incident consequencesClinical Consequences

60% of healthcare organizations reported operational disruptions due to cyber incidents.

Operational DisruptionHealthcareCyber incident

81% of healthcare organizations believe that integrating cybersecurity into the core business strategy is effective in improving operational efficiencies to deliver better outcomes.

CybersecurityHealthcareOperational Efficiency

Healthcare organizations experienced an average of five different types of cyber threats that impacted their organizations in the past year.

Cyber ThreatsHealthcare

72% of healthcare organizations experienced a moderate to severe financial impact from cyber incidents in the past two years.

HealthcareCyber incidentCyber incident consequencesFinancial impact

Over 70% of healthcare organizations reported significant financial, operational, or clinical disruptions due to cyber threats in the past year.

HealthcareCyber incidentCyber incident consequencesDisruption

52% of healthcare executives stated that training and upskilling personnel is an effective tool to combat cyber challenges.

HealthcareTrainingPersonnel