Critical Medical Devices Unable to Support PQC Transition

Forescout analysed over 2.5 million devices across 50+ healthcare organisations and found that only a small fraction of medical IoMT/OT devices support SSH/TLS implementations capable of transitioning to post-quantum cryptography; just 31% of exposed systems support TLS 1.3. The report warns these internet-exposed EMR and PACS systems are vulnerable to “harvest now, decrypt later” attacks and recommends inventorying and classifying assets, assessing PQC support, segmenting legacy systems, enforcing TLS 1.3, and engaging vendors on PQC roadmaps.