Lexology July 28, 2025
Health care remains one of the most targeted and vulnerable sectors when it comes to cyberattacks. In fact, a recent breach at a major health care analytics firm exposed the data of 5.4 million U.S. patients, making it one of the most significant breaches reported to federal regulators this year.
Legal protections for private health information have expanded, but the scale of recent incidents is staggering—affecting more than 31 million individuals in 2025 alone (according to the HIPAA Guide H1 2025).
Why health care is a prime target for cyberattacks
Health care organizations manage sensitive data, operate within highly complex digital ecosystems, and often struggle with aging infrastructure and limited budgets for information technology. Here are some examples:
- Ransomware...







