Cyber threats are growing — most organizations aren't ready

Author(s):

Austin Littrell

Fact checked by:

Keith A. Reynolds

A new survey of health care executives shows most organizations are underprepared for AI-powered cyberattacks and blind to software supply chain vulnerabilities — even as breaches and business impacts rise.

Cybersecurity is no longer just an IT issue — it's not a core business challenge for health care organizations.

In LevelBlue's 2025 Spotlight Report: Cyber Resilience and Business Impact in Healthcare, based on a global survey of 1,500 executives including 220 in health care, nearly half of health care leaders (46%) said their organizations are facing a significantly higher volume of cyberattacks than a year ago.

More than one in four (32%) experienced a breach in the past 12 months. But despite increasing awareness and investment, most say they're unprepared for the evolving threat landscape — especially attacks powered by artificial intelligence (AI).

The report offers a snapshot of a health care sector at a turning point: cybersecurity teams are getting more aligned with the business, but blind spots remain — especially in the software supply chain and employee preparedness.

LevelBlue's report makes it clear that physicians and practice leaders must treat cybersecurity as a strategic imperative, not a siloed IT concern. The next attack won't wait for your next budget cycle.