HIT Consultant October 2, 2025
Over the past few years, I’ve watched as the number of ransomware attacks on healthcare organizations across America has continued to trend upwards – undermining patient care and exposing millions of medical records.
Since January alone: a cyber criminal copied the sensitive data of 5 million patients through IT vendor Episource; a hacker breached Connecticut Community Health Center’s systems accessing the medical records of 1 million patients; and a ransomware attack on Maryland’s Frederick Health affected over 900,000 records, disrupting IT systems and forcing a nearby hospital to take on more patients.
The common thread? Healthcare organizations’ cybersecurity investments are perfectly adequate – until the moment attackers prove otherwise.
With the proposed Healthcare Cybersecurity Act, Congress has...







