A 2025 survey of 517 US healthcare IT professionals reveals the top cybersecurity threats facing the sector. Data breaches are the biggest concern (33%), while phishing is the most commonly experienced attack (40%). Key findings include: 52% say cyber threats most significantly disrupt patient care, 37% prioritize employee security awareness training, and 45% cite keeping up with the evolving threat landscape as their biggest challenge. Experts recommend implementing MFA, network segmentation, regular patching, EDR solutions, and incident response planning as foundational defenses. Notable real-world breaches like Change Healthcare (190M affected) and Kaiser (13.4M affected) underscore the stakes.
Table of contents
Key takeaways1 in 3 say data breaches are the biggest cybersecurity concern in healthcarePhishing attacks are actually the most common threat reported by healthcare IT professionalsSecurity awareness training is a top priority in healthcare settingsDisruption of patient care is the biggest consequence of cyber threats90% are at least somewhat confident in their preparedness for a cyberattackNearly half say keeping up with evolving threats is the biggest challengeHow to improve cybersecurity in healthcareProtect your healthcare organization from evolving threatsMethodology2 Impressions