Microsoft Threat Intelligence healthcare ransomware report highlights need for collective industry action

Microsoft Threat Intelligence highlights that ransomware is a primary and growing threat to US healthcare, causing severe financial losses, operational downtime, and risks to patient care. The report describes common attacker methods—phishing/social engineering and ransomware-as-a-service—notes active financially motivated groups (e.g., Vanilla Tempest, Sangria Tempest), cites sector statistics (healthcare among top targeted industries, large average ransom/downtime costs, and hundreds of incidents), and recommends governance, incident response planning, monitoring, staff training, and information sharing (e.g., Health-ISAC) to strengthen resilience.