On-demand video

From Minimal Risk to Prime Target: Cyber Risk and Sustainability in Healthcare

A decade ago, cyber attacks against healthcare were virtually nonexistent. Today, healthcare is one of the most targeted industries, facing relentless threats from ransomware gangs, nation-state actors, and insider risks. At the same time, providers grapple with soaring demand, limited resources, and tightening budgets.

Once a low-risk domain, healthcare has become a prime target for cyberattacks, threatening patient safety and critical infrastructure. In 2019, IBM X Force threat intelligence ranked healthcare as the eighth most attacked sector in the world. Five years later, it has risen sharply to third place.  

This session brings together industry leaders to share actionable strategies for strengthening resilience in a sector balancing relentless digital transformation with mounting pressure to improve efficiency and deliver better outcomes. 

First, hear from Denise Anderson, President and CEO of Health-ISAC, as she reveals how healthcare’s risk profile has transformed, and what organizations must do to defend critical infrastructure and care delivery. Denise dives into: 

  • The dramatic shift: healthcare’s journey from virtually no attacks (2015) to a prime target (2025) 
  • Ransomware’s surge: record-breaking attacks and financial losses in the health sector 
  • Nation-state and criminal tactics: supply chain breaches, insider threats, and advanced phishing 
  • The risks of neglected basics: MFA, privileged access, and patching 
  • Third-party and concentration risks: why vendor security matters more than ever 
  • Emerging threats: AI-powered attacks, neurotechnology vulnerabilities, and the future of healthcare cybersecurity 

Immediately following her presentation, Denise joins a high-level panel with Dr. Hans-Martin von Stockhausen (Siemens Healthineers) and Daan Brinkhuis (Z-CERT), moderated by Rob Coveney (DNV Cyber). Together, they explore the challenges and opportunities shaping healthcare’s cyber maturity: 

  • Why maturity lags: budget realities—and the other factors holding providers back 
  • Regulation that bites (and where it doesn’t): NIS2, CRA, and the EU hospital action plan 
  • Borrowed playbooks: practices healthcare should adopt from energy, transport, and manufacturing 
  • Beyond IT: securing medical devices and other operational technologies that keep care running 
  • Quick wins: procurement/lifecycle changes and provider–supplier expectations that move the needle now 

Discover how healthcare organizations can build resilience, share intelligence, and prepare for the next wave of cyber threats. Learn from one of the industry’s leading voices, and take away actionable strategies to protect your organization and your patients. 

Watch the full presentation on-demand below. 

 

Watch the videos