Cyberattacks Cause Significant Disruption in U.S. Healthcare Organizations, New Report Reveals
SUNNYVALE, Calif. — October 13, 2026 — A recent report released by Proofpoint, Inc., a global leader in cybersecurity, in collaboration with the Ponemon Institute, underscores the alarming impact of cyberattacks on U.S. healthcare organizations. The fifth annual Cyber Insecurity in Healthcare report reveals that nearly three in four healthcare providers have experienced disruptions to patient care due to these security breaches.
According to the report, a staggering 97% of the surveyed healthcare organizations reported at least one cyberattack in the preceding 12 months. Of these, 74% indicated that the attacks led to significant disruptions in patient care. The report details a concerning rise in the frequency and cost of cyberattacks, noting that the average number of attacks per organization increased to 51 in 2026, a rise from 43 in the previous year. The financial toll has also escalated, with the average cost of the most expensive cyberattack now at $4.2 million, reflecting an 8% increase since 2025.
Ryan Kalember, the Chief Strategy Officer at Proofpoint, emphasized the critical intersection between cyber resilience and patient care. “Cyber resilience has become essential to healthcare resilience,” he stated. Kalember pointed out that when cyberattacks lead to delays in procedures, extended hospital stays, or necessitate the transfer of patients to other facilities, the implications extend far beyond financial losses; they pose direct risks to patient safety. He further elaborated on the growing influence of artificial intelligence (AI) within healthcare contexts, indicating that while AI systems are designed to streamline processes, the lack of proper governance may lead to data loss and other vulnerabilities.
The report is based on responses from 705 IT and security professionals within U.S. healthcare organizations and highlights several key trends affecting the sector.
Operational Disruption as a Major Concern
One of the most critical findings of the report is the increasing operational disruption resulting from cyberattacks, which is now identified as a substantial cost burden for healthcare organizations. Downtime and recovery efforts have emerged as primary financial strains, averaging $1.39 million for disruption to normal operations, closely followed by $1.05 million attributable to lost productivity and idle time.
Rapid AI Adoption vs. Insufficient Governance
The pace at which AI is being integrated into healthcare operations presents significant challenges. While 45% of the organizations surveyed reported having embedded AI into their cybersecurity frameworks or patient care activities, a troubling 60% admitted to lacking adequate controls governing sensitive data utilized in AI systems. Moreover, only 42% had specific security measures tailored to AI technologies, and merely 32% had complete visibility into the use of unsanctioned AI tools by employees.
As organizations race to adopt AI capabilities, various risks have emerged regarding data management. Concerns cited include supply chain vulnerabilities related to AI vendors (40%), the potential for data leakage via AI-generated prompts (36%), and heightened risks of phishing attacks through AI-generated social engineering tactics (34%).
Patient Care Impact of Cyber Disruptions
The repercussions of cyberattacks on patient care are significant, as evidenced by multiple attack vectors including cloud/account compromise, ransomware, supply chain breaches, and business email compromise (BEC). The report indicates that 53% of respondents reported medical procedure complications due to cyber disruptions. Additionally, reported figures revealed that 52% of organizations faced increased patient stays and delays in tests or procedures.
Supply chain attacks have emerged as particularly harmful, with 90% of organizations experiencing these threats reporting disruptions to patient care. Ransomware attacks were linked to extended hospitalizations in 70% of cases, while BEC incidents frequently resulted in care delays, with 68% of respondents indicating poor patient outcomes as a consequence.
Declining Ransomware Payments but Continuing Disruptions
Interestingly, the report notes that fewer organizations opted to pay ransom in the event of an attack, with only 31% reporting they made payments—down from 33% in 2025. The average ransom payment also saw a decline from $1.2 million to $1.1 million. However, the clinical fallout of these attacks persists, as 72% of organizations suffering from ransomware indicated interruptions in patient care. Among those reporting disruptions, 70% noted longer patient stays as a direct consequence.
The findings from the 2026 Cyber Insecurity in Healthcare report paint a troubling picture of the intersection between cyber threats and patient safety. With the ongoing evolution of cyberattacks and the rapid adoption of AI technologies, healthcare organizations must prioritize strengthening their cybersecurity frameworks to safeguard patient care and enhance operational resilience.
To gain deeper insights, interested individuals can download the full report here or explore the related blog here.
About Proofpoint, Inc.
Proofpoint, Inc. stands as a global leader in human and agent cybersecurity, committed to the security of people, data, and AI agents across various digital platforms. Trusted by over 80 of the Fortune 100 companies, along with more than 14,000 large enterprises, Proofpoint strives to halt threats, prevent data loss, and enhance resilience within organizations.
For more on Proofpoint’s mission and services, visit www.proofpoint.com.