Healthcare cyber incidents increased by 21% in 2025, though the rise wasn’t as sharp as in other sectors, according to the Health Information Sharing and Analysis Center.
Here are five things to know from Health ISAC’s Jan. 30 report:
1. Health sector-specific cyberattacks rose from 476 in 2024 to 575 in 2025.
2. Across all sectors, breaches grew from 5,744 in 2024 to 8,903 in 2025, a 55% increase.
3. Health-ISAC issued 183 targeted alerts to health sector member organizations in the fourth quarter of 2025.
4. In Q4, the most common risks included exposed remote access tools, open and exposed databases, vulnerable Ivanti Endpoint Manager instances, and Windows Server Update Services Remote Code Execution bugs.
5. While attacks were up, the number of patient records breached dropped in 2025, after the Change Healthcare cyberattack affected 192.7 million patients in 2024.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.