Research and trends: State of Healthcare Security 2025

The healthcare industry stands at a critical juncture in cybersecurity, facing unprecedented challenges and technological opportunities. The State of Health Security 2025 report reveals a complex landscape where data vulnerability, technological innovation, and regulatory pressures converge.

Thoropass collected research and news from the past year and identified key data points and trends that will be useful in driving healthcare security in the coming year. Here are some of the main takeaways.

The stark reality of cyber threats for healthcare organizations

The statistics are sobering. Cybersecurity breaches in healthcare have surged by 97% year-over-year, with a single breach at Change Healthcare affecting 100 million people. Perhaps most alarmingly, stolen healthcare data is now 10 times more valuable than credit card data, making the industry an increasingly attractive target for cybercriminals.

AI is a double-edged sword

Artificial intelligence emerges as both a solution and a potential vulnerability. While 63% of organizations find keeping data safe on AI difficult, the technology is simultaneously seen as the most popular tool for managing increased risk.

Healthcare organizations are optimistic, with many planning to invest heavily in AI technologies that promise:

• Automation of data analysis
• Reduction of risk workforce
• Potential savings of $156 billion through healthcare automation by 2026

As Bunny Ellerin, co-founder of Digital Health New York and member of Thoropass’ Health Advisory Board, notes in the report, the key is not to fear AI but to learn how to harness it effectively. The opportunity lies in quickly understanding how these technologies can make healthcare organizations more efficient and secure.

Data challenges

Our research uncovered a critical issue: by the end of 2025, 36% of the world’s data will be health-related, but a staggering 90% of this data remains unstructured. This presents both a significant challenge and an opportunity for AI-driven solutions to transform data management.

Access control is a primary concern

Credential access has emerged as the number one security fear for healthcare organizations. With an average of 45+ security tools used in enterprises and 68% of organizations reporting multiple supply chain attacks, the need for integrated, streamlined security systems has never been more apparent.

Katherin Kelton is an executive specializing in legal, HR, and global compliance and serves on Thoropass’ Health Advisory Board. Her advice is: “Cleanliness is next to godliness…The volume of health-related data continues to rise even as areas of the industry experience consolidation. Our challenge, then, is to ensure that this data is as useful.”

Want to dive deeper into the future of healthcare cybersecurity? The full State of Health Security 2025 report offers comprehensive insights that every healthcare leader should be aware of.