Ponemon 2025 Healthcare Cyber Insecurity Report banner with business professional.

Threat Report

2025 Ponemon Healthcare Cybersecurity Report

 

In this annual survey, Proofpoint and Ponemon dive deep into the cybersecurity risks faced by the healthcare industry and their impact on patient care.

Now in its fourth year, this year’s report finds that healthcare organizations are making steady progress when it comes to upgrading their systems, rolling out AI and advancing their cybersecurity awareness programs. However, their ability to protect confidential patient data and ensure the highest quality of medical care is increasingly at risk.

Here are a few highlights of this year’s report:

  • 93% of organizations experienced a cyberattack in the past 12 months
  • Nearly 3 in 4 US healthcare organizations report patient care disruption due to cyberattacks
  • 96% of organizations experienced at least two data loss or exfiltration incidents involving sensitive healthcare data over the past two years
  • 35% say that employees not following policies were the leading cause of data loss or exfiltration
  • 76% are using security awareness training programs to reduce their risks—an increase from 71% in 2024
  • 56% say AI-based data loss prevention (DLP) is highly effective in preventing employee-caused data loss incidents 
  • 60% say protecting the confidential data used in AI systems is difficult or very difficult

Download the report now to access the full survey results.