Forbes October 8, 2025
When cybersecurity fails in healthcare, people get hurt. That isn’t metaphorical—it’s literal. The 2025 Ponemon Healthcare Cybersecurity Report shows what many in the field have long feared: the line between cyber risk and clinical risk has vanished.
I’ve covered cybersecurity for two decades, and every year the data gets more sobering. But this year’s results land differently. Ninety-three percent of healthcare organizations surveyed reported at least one attack in the past year, with victims hit an average of 43 times. Those aren’t abstract numbers—they represent disrupted surgeries, delayed lab results and ER doctors locked out of digital records when seconds matter most.
“Patient safety is inseparable from cyber safety,” said Ryan Witt, Proofpoint’s healthcare leader. “When care is delayed, disrupted,...







