Healthcare Sector Cyber Threat Intelligence Report Q1 2026

The ransom payment rate in healthcare is 68%–72% compared with about 40% in other sectors.

59% of cyberattacks on healthcare organizations involve ransomware.

Hospitals can lose $1,000,000 to $2,000,000 per day during operational disruptions caused by cyberattacks.

VPN and remote access systems account for roughly one-third of initial access vectors in healthcare cyberattacks.

56% of cyberattacks on healthcare organizations target U.S.-based organizations.

Access to healthcare systems can be purchased for as little as $2,000 to $50,000.

Healthcare organizations are being hit by cyberattacks about every 10 hours.

Medical records sell for $250 to $1,000 each on illicit markets.