The American Hospital Association is supporting a bill designed to increase the healthcare cybersecurity workforce in rural America. The Rural Hospital Cybersecurity Enhancement Act, led by U.S. Sens. Josh Hawley, R-Mo., Maggie Hassan, D-N.H., and Mark Kelly, D-Ariz., would direct…
Cybersecurity news for hospitals and health systems
Healthcare cybersecurity news covering breaches, ransomware and the hospital cyberattacks that shut down clinical operations. Becker's tracks how health systems detect, respond and spend to prevent the next one.
Honolulu-based University of Hawaii Cancer Center paid a ransom to hackers to prevent them from releasing patient data. In August, the cancer center discovered a cybersecurity incident limited to servers supporting its research operations, according to a report to the…
Cybersecurity risks facing healthcare organizations in 2026 are increasingly tied to prolonged technology outages that directly disrupt patient care, according to John Riggi, national adviser for cybersecurity and risk at the American Hospital Association. “I believe there needs to be…
As health systems increasingly adopt connected devices, maintaining their security becomes paramount. Here are the top healthcare Internet of Things security vendors, according to a Jan. 5 KLAS Research report that surveyed 109 organizations. Performance scores are out of 100:…
Covenant Health, based in Andover, Mass.-based, has sent additional data breach notification letters to patients after completing further analysis related to a cyberattack that occurred earlier in 2025. The health system mailed letters to affected patients, including Maine residents, on…
Advertisement
A hacker sought to reroute payment funds at Yonkers, N.Y.-based St. John’s Riverside Hospital before the facility detected the incident. In September, the unauthorized party accessed a small number of employee email accounts to send phishing emails for the theft…
A federal court has accepted the guilty pleas of two men accused of committing healthcare ransomware attacks while working as cybersecurity professionals. Ryan Clifford Goldberg and Kevin Tyler Martin pleaded guilty in U.S. District Court for the Southern District of…
Shreveport, La.-based Ochsner LSU Health–Regional Urology is notifying patients of a data security incident involving retired systems that may have exposed personal and medical information. The health system identified unusual activity Oct. 10 affecting legacy Regional Urology systems that had…
More than 20 million people were affected by the 10 largest healthcare data breaches reported to the federal government in 2025, TechTarget reported Dec. 22, citing information from the HHS Office for Civil Rights’ public data breach portal. More than…
Columbia, Md.-based MedStar Health has begun notifying patients after determining that a cybersecurity breach in September exposed personal and medical information. The health system learned Oct. 4 that an unauthorized third party had accessed its systems. An investigation found the…