Rural hospitals in US need to invest at least $70 million in cybersecurity, Microsoft finds

Microsoft reports that addressing basic cybersecurity risks across approximately 2,100 U.S. rural hospitals would cost $70–75 million total (about $30–40k per hospital), based on assessments from its Cybersecurity for Rural Hospitals Program. Findings show significant gaps: over 62% struggle with email security, MFA, and network segmentation; only 43% conduct vulnerability scanning and timely patching; and just 29% separate standard and privileged accounts. Ransomware remains the primary concern due to potential care disruptions and limited resources, exemplified by Whitman Hospital & Medical Clinics still experiencing system outages after a February 28 cyberattack. Many independent rural hospitals face financial and training hurdles, though program participation has exceeded expectations.