59% of cyberattacks on healthcare organizations involve ransomware.

56% of cyberattacks on healthcare organizations target U.S.-based organizations.

VPN and remote access systems account for roughly one-third of initial access vectors in healthcare cyberattacks.

Hospitals can lose $1,000,000 to $2,000,000 per day during operational disruptions caused by cyberattacks.

Only 9% of healthcare and manufacturing organizations have protected more than 80% of their critical systems.

74% of healthcare organizations identify visiting clinicians as requiring the most granular policy attention.

62% of healthcare and manufacturing security leaders say today's microsegmentation solutions are easier to deploy than those from five years ago.

44% of healthcare organizations use medical devices with known, unpatched vulnerabilities.

28% of healthcare organizations operate medical devices past end-of-support.

Microsegmentation accounts for 24% of currently deployed Zero Trust initiatives.

68% of healthcare and manufacturing organizations are pursuing microsegmentation as part of a Zero Trust strategy.

69% of healthcare and manufacturing security leaders demand identity-based controls in any modern solution.

Healthcare has 35% consumer trust

Legacy Windows operating systems are most prevalent in retail (39%), healthcare (35%), and financial services (29%).

Individual extortion demands in healthcare reached as high as $4 million in the first half of 2025.

Social engineering drove 88% of material losses in the first half of 2025 in Resilience's healthcare portfolio, making human error the industry's single most consequential vulnerability.

Healthcare organizations that establish a data governance committee achieve more than three times the risk reduction compared to organizations in other industries.

Telnet exposure in healthcare is 8%, up from 6%.

Average claim severity in Resilience's healthcare portfolio increasesd from $800,000 in 2024 to more than $2 million per incident in 2025.

Health care was the most affected sector by data security incidents, accounting for 27% of incidents; finance and insurance accounted for 18%; business and professional services accounted for 15%.