Ransomware Attacks on Healthcare Surge Even as Ransom Demands Drop
Ransomware in Healthcare: A Persistent Threat
Ransomware attacks on the healthcare sector continue to be a significant concern. A recent report by Comparitech highlights enduring threats despite a reduction in ransom demands. In 2025, the industry faced 445 cyberattacks in hospitals and clinics, up slightly from 437 the previous year. Companies connected to healthcare saw a 25% surge, reaching 191 incidents.
The overall tally came to 636 ransomware incidents affecting healthcare in 2025. After an initial dip in attacks early in the year, there was a startling 50% rise in the last quarter. The disruption in healthcare-related businesses picked up similarly in the second half of the year.
Over 16.5 million records were compromised, with more than 10.1 million from 155 specific attacks on healthcare providers. Interestingly, average ransom demands plummeted to $615,000, down 84% from $3.9 million in 2024.
Major Breaches and Rising Challenges
Several major breaches were recorded in 2025, including a significant one involving Episource LLC affecting 5.4 million individuals, and DaVita Inc. with nearly 2.7 million. Remarkably, only two confirmed ransom payments were reported, highlighting growing resistance to attackers.
Key ransomware groups like Qilin, INC, SafePay, Sinobi, and Medusa were notably active, with the United States experiencing the highest number of attacks. The declining ransom demands could be attributed to the emergence of ransomware-as-a-service and the use of AI, driving quicker and lower payout objectives for cybercriminals.
Rebecca Moody from Comparitech stresses the ongoing need for vigilance. She cautions against complacency as hackers continue to evolve their methods, emphasizing robust security measures to combat the increasing pace of attacks leveraging third-party vulnerabilities.
Stay informed and protect your digital life. Subscribe to Qsentinel for the latest updates.
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more
