All hospitals should be concerned about cyberattacks. Here’s why

At least 389 U.S. healthcare institutions were hit by ransomware attacks this fiscal year
Read the article by Bruce Gil in Quartz
Why the healthcare industry is so vulnerable
Errol Weiss is the chief security officer of the Health-ISAC, the industry’s information sharing and analysis center. The group provides healthcare organizations with the tools to share information on cyber threats. Weiss describers it as “virtual neighborhood watch program.”
Weiss has worked in cybersecurity for over 25 years. He said that one reason health care is particularly susceptible dates back to the 1990’s when the industry first started to shift to using electronic records.
“I think the focus in those organizations at the time, as they were investing in all of these electronic health record systems and moving all the data over to those platforms, on being compliant with the HIPAA regulation and ensuring those healthcare records were were kept private, but not necessarily secure and not investing in security,” said Weiss.
Since then, the industry hasn’t invested sufficiently in cybersecurity leading to under resourced teams.
- Related Resources & News
- Healthcare Heartbeat 2024 Q4
- Health-ISAC Hacking Healthcare 2-19-2025
- Podcast: Reflecting on the Change Healthcare cyberattack
- Senate Confirms Trump Pick RFK Jr. to Lead HHS
- The Alarming Backdoor Hiding in 2 Chinese Patient Monitors
- Health-ISAC 2025 Health Sector Cyber Threat Landscape
- How Health Systems Manage Security in the Cloud
- Change Healthcare Attack a Wake-up Call for the Industry
- Five High-Impact Cyberattacks Healthcare Industry Should Avoid in 2025
- Health-ISAC Hacking Healthcare 2-11-2025