2026 STUDY ON CYBER INSECURITY IN HEALTHCARE

Cyberattacks Are Increasing the Cost and Risk to Patient Care

See how 705 healthcare IT and security practitioners are navigating rising cyberattacks, AI risk, data loss, and growing disruption to patient care.

Download the 2026 Ponemon Healthcare Cybersecurity Report

Tablet showing Proofpoint’s “2026 Study on Cyber Insecurity in Healthcare” report cover.

See How Cyber Risk Is Affecting Patient Care in 2026

Cyberattacks in healthcare no longer disrupt only systems. They disrupt care. As attacks become more frequent and costly, healthcare organizations are seeing the effects reach clinical operations and patient outcomes.

Our fifth annual study examines this growing connection, along with the emerging risks created by AI, cloud adoption, data loss, and an expanding attack surface.

Turn the Findings into a Stronger Healthcare Security Agenda

Use the research to understand where healthcare cyber risk is increasing, how attacks are affecting care delivery, and where security programs may need greater visibility, governance, and resilience.

Protect Patient Care

Understand how ransomware, business email compromise (BEC), supply chain attacks, and cloud/account compromises are disrupting clinical operations and contributing to poor patient outcomes.

Prepare for Growing AI Risk

See how rapidly healthcare organizations are adopting AI while controls for sensitive data, AI systems, agents, and unsanctioned AI use continue to lag.

Reduce Human and Data Risk

Learn how employee mistakes, privileged access misuse, and data handling errors continue to contribute to data loss and disruptions to patient care.

01 04

Cyberattacks Are Becoming Patient Care Events

97 %

of healthcare organizations surveyed experienced at least one cyberattack in the past 12 months.

74 %

on average, of organizations that experienced the four types of cyberattacks studied reported disruption to patient care.

$ 4.2 M

was the average total cost of the most expensive cyberattack experienced in the past 12 months.

Prepare for the Risks Reshaping Healthcare Cybersecurity

The findings point to a growing need to connect cyber resilience, identity security, human risk management, supply chain security, and AI governance. See where healthcare organizations are making progress and where gaps remain as cyber incidents increasingly affect operations and patient outcomes.