Proofpoint Healthcare Cyberattacks Disrupt Patient Care Amid Rising Costs
Article Content
- •97% of healthcare organizations faced cyberattacks in the last year.
- •74% reported disruptions to patient care due to these attacks.
- •The average cost of the most expensive cyberattack reached $4.2 million.
A recent report by Proofpoint and Ponemon Institute reveals that 97% of U.S. healthcare organizations experienced at least one cyberattack in the past year, with 74% reporting disruptions to patient care. The average number of attacks increased to 51, and the cost of the most expensive attack rose to $4.2 million, an 8% increase from 2025. Operational disruption is now the largest financial impact, averaging $1.39 million per incident. AI adoption in healthcare is accelerating, but 60% of organizations lack proper controls for sensitive data used in AI systems. The report indicates that cyber resilience is crucial for maintaining patient care, as delays and operational interruptions pose direct risks to patients. The findings are based on responses from 705 IT and security practitioners in the healthcare sector.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Ascension in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What percentage of healthcare organizations were affected?
What is the average cost of a cyberattack in healthcare?
How does AI adoption affect cybersecurity in healthcare?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…