The healthcare sector experienced an average of two healthcare breaches per day in the first half of 2025.

The healthcare sector saw a $2.35 million reduction in costs compared to 2024.

Breaches across the healthcare sector take the longest to identify and contain at 279 days, which is more than 5 weeks longer than the global average of 241 days.

Healthcare breaches remained the most expensive, averaging $7.42 million.

Healthcare ranked third in June 2025 with 42 ransomware attacks, nearly doubling from 22 in May.

4 out of 5 rural healthcare leaders say their infrastructure cannot support advanced email security.

Rural healthcare organisations trail urban ones by 22% in adopting AI-based threat detection.

6 out of 10 rural healthcare providers say their current secure email platform causes regular complaints and workflow delays.

50% of rural healthcare organisations say budget limitations are a top barrier to upgrading security tools, which is nearly double the rate of urban peers.

More than half of rural healthcare providers report poor mobile usability and slow encryption that can delay care.

73% of rural healthcare organisations struggle to maintain HIPAA compliance due to staffing and funding gaps.

88% of rural healthcare leaders lack confidence that their current email platform is fully HIPAA compliant out of the box.

The healthcare sector was the most targeted with 52 publicly disclosed ransomware attacks between April - June 2025.

In one analysis, health care & insurance had 16% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, health care & insurance had 16% of vulnerable assets across cloud, APIs, and web applications.

The healthcare sector dropped out of the top five most targeted industries by ransomware for the first time since Q2 2022.

61% of healthcare organizations reported at least one identity-related attack in the past year.

42% of healthcare companies failed an identity-related compliance audit.

34% of healthcare organizations name AI impersonation of users as their top emerging threat.

Only 23% of healthcare organizations offer passwordless authentication