Healthcare Cyberattack Losses Surge, Netwrix Report Reveals

Healthcare organizations are facing escalating financial losses due to cyberattacks, as revealed in the 2025 Cybersecurity Trends Report by Netwrix. The report indicates that nearly half of healthcare organizations experienced a cybersecurity incident in the past year, with the percentage of those reporting losses above $200,000 nearly quadrupling from 5% in 2024 to 19% in 2025.

The report highlights that phishing, ransomware, and user account compromise are the most common attack types, often initiated through stolen credentials. Notably, 31% of respondents reported incidents involving compromised user or admin accounts. The survey also introduced questions about AI for the first time, revealing that 37% of IT and security professionals have already strengthened defenses against AI-driven threats.

Netwrix emphasizes the importance of an identity-first approach to protect patient data, as attackers increasingly leverage AI to enhance phishing and account compromise tactics. Despite increased investment in cybersecurity defenses, the report suggests that attackers are evolving faster than defenders, widening the gap with the use of AI.