A Quarter of Healthcare Organizations Report Medical Device Cyber-Attacks

RunSafe Security's 2026 Medical Device Cybersecurity Index reports that 24% of healthcare organizations suffered cyber-attacks impacting medical devices over the past year, with 80% of those incidents causing moderate to significant patient impact; the survey also highlights extensive use of unpatched and end-of-support devices and growing concern about AI-enabled medical systems. The report cites recent incidents including a claimed exfiltration of over nine million records (ShinyHunters naming Medtronic) and a widespread device-wiping event at Stryker attributed to the Handala group, illustrating how attacks on device-adjacent systems can translate into patient harm.