Report by Proofpoint
2025 Ponemon Healthcare Cybersecurity Report
Key Findings
Supply chain attacks against healthcare organizations decreased significantly from 68% in 2024 to 44% in 2025.
Healthcare organizations that experienced cloud/account compromises had an average of 21 such compromises in the past two years.
96% of healthcare organizations researched had at least two data loss or exfiltration incidents involving sensitive and confidential healthcare data in the past two years.
72% of healthcare organizations say they experienced an average of 21 cloud/account compromises.
61% of healthcare organizations say cloud/account compromises increased complications from medical procedures.
61% of healthcare organizations that had ransomware attacks experienced an average of five such attacks in the past two years.
Ransom payment rates by healthcare organizations declined in 2025 (from 36% to 33% in 2025).
The average number of cyberattacks experienced by U.S. healthcare organizations that suffered at least one cyberattack was 43, which is a 3-point increase from 40 in 2024.
On average, healthcare organizations experienced 18 data loss or exfiltration incidents in the past two years.
Concerns about budgets decreased from 40% to 37%.
44% of healthcare organizations say their organizations experienced an attack against its supply chains, which is a significant decline from 68% in 2024.
36% of healthcare organizations that experienced data loss or exfiltration incidents say it caused delays in procedures and tests that resulted in poor outcomes.
55% of healthcare organizations say data loss or exfiltration incidents impacted patient care.
The costliest ransom paid by healthcare organizations in 2025 represented a 60% increase from $771,905 in 2022.
In 2022, 64% of respondents from healthcare organizations said their organizations were very or highly vulnerable to BEC/spoofing/impersonation attacks.
67% percent of healthcare organizations say ransomware attacks had a negative impact on patient care.
35% of healthcare organizations cite employee negligence because of not following policies as a primary root cause of incidents.
An average of 72% of U.S. healthcare organizations that experienced a cyber attack reported disruption to patient care, which is a 3-point jump from 69 percent in 2024.
The costliest ransom paid (extrapolated value) by healthcare organizations was $1.2 million.
55% of respondents from healthcare organizations believe their organizations are vulnerable or highly vulnerable to a ransomware attack.
52% of healthcare organizations were vulnerable or highly vulnerable to a BEC/spoofing/impersonation incident in 2024.
64% of healthcare organizations say their organizations are vulnerable or highly vulnerable to a cloud/account compromise.
93% of U.S. healthcare organizations experienced at least one cyberattack in the past 12 months.
72% of healthcare organizations say their organizations have experienced cloud/account compromises, which is an increase from 69% in 2024.
Healthcare organizations that experienced supply chain attacks, on average, experienced four supply chain attacks in the past two years.
61% of healthcare organizations say cloud/account compromises resulted in disruption in patient care.
25% of healthcare organizations cite employees sending PII or PHI to an unintended recipient via email as a primary root cause of incidents.
53% of healthcare organizations believe their organizations are vulnerable or highly vulnerable to a BEC/spoofing/impersonation incident.
56% of healthcare organizations that experienced ransomware attacks say it resulted in delays in procedures and tests.
67% of healthcare organizations that experienced ransomware attacks say it resulted in longer lengths of patient stay.
59% of attacked tools in healthcare organizations are text messaging.
54% of attacked tools in healthcare organizations are Zoom/Skype/video conferencing.
52% of healthcare organizations say cloud/account compromises resulted in longer length of patient stay.
45% of attacked tools in healthcare organizations are email.
54% of healthcare organizations that experienced data loss or exfiltration incidents say it increased the mortality rate.
25% of healthcare organizations cite privilege access abuse as a primary root cause of incidents.
The annual IT budget of healthcare organizations is $65 million.
52% of healthcare organizations use secure email gateways to protect against email-based attacks, which is a 7-point increase from 2024.
21% of the IT budget of healthcare organizations is dedicated to information security, representing a 2-point jump year-over-year.
43% of healthcare organizations report lacking in-house expertise concerning the top barrier to an effective cybersecurity posture.
40% of healthcare organizations report lacking clear leadership as a top two barrier to an effective cybersecurity posture.
57% of healthcare organizations say their organizations are very or highly vulnerable to supply chain attacks.
55% of healthcare organizations are worried about the security risks created by insecure mobile apps.
38% of healthcare organizations identified generative AI or AI tools as a cybersecurity concern, a new category in this year’s study.
49% of healthcare organizations are less worried about BYOD.