Third Annual Ponemon Institute Report: Nearly Seven in 10 Healthcare Organizations Experienced Disruption to Patient Care Due to Cyber Attacks

Proofpoint and Ponemon’s 2024 survey of 648 U.S. healthcare IT and security practitioners finds 92% of organizations experienced a cyber attack in the past year and 69% reported patient-care disruption, with supply chain attacks most likely to impact care (82% of those affected). BEC and ransomware drove poor outcomes (69% and 61% delayed procedures), while average ransomware payouts rose to $1,099,200 despite fewer payments. Top concerns shifted to insecure mobile apps (59%) and cloud/account compromise (55%); insider-driven data loss remained prevalent, leadership gaps grew, and budgets improved modestly. Over half have embedded AI in security and/or patient care, with most citing it as effective in strengthening cybersecurity posture.