Healthcare and cyber security in the U.S. - Statistics & Facts

The healthcare industry’s repository of data and private medical information has long been a magnet for cyber criminals. In the United States, cyber attacks have been costly - often resulting in up to millions of compromised patient records per breach. For Michigan-based Trinity Health, a 2020 data breach cost the organization a total of 3.32 million individual records. Meanwhile in the largest healthcare breach in the U.S. to date - that of health insurance provider Anthem Inc., 78.8 million private records were compromised. Not only are financial losses at stake during such a breach, but the health of patients is severely compromised when critical medical records can no longer be accessed.

Healthcare institutions – a gold mine for cyber criminals?

At an average of 9.23 million U.S. dollars, the financial loss suffered during a healthcare data breach is more than double that of the global average across all industries, which was 4.24 million U.S. dollars in 2021. With successful breaches coming at such a high cost, it is no surprise that the healthcare industry has invested significantly in cyber protection. In 2021, 60.2 billion U.S. dollars was spent on cybersecurity across the globe, the highest figure to date. The industry is also expected to be worth 345.4 billion U.S. dollars by 2026. The average downtime duration after a ransomware attack on organizations is around 22 days and in the case of patients needing critical care, this loss of access to important data could have a significant medical impact. According to records from 2020, 17 percent of cyber-attacks in the healthcare industry led to serious patient injury or harm, while nearly 30 percent caused the disruption of emergency services. Phishing was the most commonly experienced type of cyber-attack, accounting for an overwhelming 60 percent of all cases in the healthcare sector. This commonly takes place in the form of unsuspecting employees who, by clicking on a harmless-looking email link, grant malicious parties access to their organization’s confidential data. E-mails also happened to be the second largest source of all healthcare data breaches in the United States, after network servers.

Consumer mistrust remains, despite advances in medical technology

Globally, when it comes to the handling and protection of personal data, over half of consumers tend to have a lot of trust healthcare institutions. In the U.S., trust remains high with over 80 percent of Americans having faith in hospitals, healthcare providers and pharmacies to keep their data safe. This is relatively high in comparison to trust in the government which stood at less than 40 percent. A hotly debated issue, the implementation of artificial intelligence (AI) in the medical field has also given rise to concerns. While AI-assisted mental health services, diagnosis of diseases, and medication reminders have been celebrated, over half of Americans surveyed in 2021 felt that it threatened their security and privacy, while 35 percent saw AI as susceptible to machine bias.
This text provides general information. Statista assumes no liability for the information given being complete or correct. Due to varying update cycles, statistics can display more up-to-date data than referenced in the text.
Published by Ani Petrosyan, Oct 18, 2022

Key insights

Largest healthcare data breach in the U.S.
78.8m affected individuals
Average cost of a healthcare data breach
10.93m USD
Most common type of cyber crime in healthcare
Phishing
Get more insights

Editor’s Picks Current statistics on this topic

Annual number of data compromises and individuals impacted in the United States from 2005 to 2022

Cyber Crime

Cyber crime: number of compromises and impacted individuals in U.S. 2005-2022

Largest healthcare data breaches to date in the United States as of May 2023, by number of affected individuals (in millions)

Cyber Crime & Security

Biggest healthcare data breaches to date in the U.S. as of 2023

Global number of data breaches with confirmed data loss from November 2021 to October 2022, by target industry and organization size

Cyber Crime

Data breaches worldwide 2021-2022, by target industry and organization size

Related topics

Recommended

6

Recommended statistics

Overview

5

Overview

Data breaches

9

Data breaches

Cost of a data breach

5

Cost of a data breach

Hacking and cyber attacks

11

Hacking and cyber attacks

IT perspective and prevention

6

IT perspective and prevention

Digital health and privacy concerns

8

Digital health and privacy concerns

Spotlight: cyber security incidents and COVID-19

6

Spotlight: cyber security incidents and COVID-19

Further reportsGet the best reports to understand your industry

U.S. companies and cyber crime
U.S. companies and cyber crime
U.S. consumers and cyber crime
U.S. consumers and cyber crime
U.S. government and cyber crime
U.S. government and cyber crime
Information technology (IT) in healthcare
Information technology (IT) in healthcare
Pharma and healthcare industry advertising in the U.S.
Pharma and healthcare industry advertising in the U.S.

Contact

Get in touch with us. We are happy to help.
Statista Locations
Contact Meredith Alda
Meredith Alda
Sales Manager– Contact (United States)
Email
support@statista.com

Mon - Fri, 9am - 6pm (EST)

Contact Yolanda Mega
Yolanda Mega
Operations Manager– Contact (Asia)
Email
asia.support@statista.com

Mon - Fri, 9am - 5pm (SGT)

Contact Kisara Mizuno
Kisara Mizuno
Senior Business Development Manager– Contact (Asia)
Email
support.japan@statista.com

Mon - Fri, 10:00am - 6:00pm (JST)

Contact Lodovica Biagi
Lodovica Biagi
Director of Operations– Contact (Europe)
Email
eu.support@statista.com

Mon - Fri, 9:30am - 5pm (GMT)

Contact Carolina Dulin
Carolina Dulin
Group Director - LATAM– Contact (Latin America)
Email
latam@statista.com

Mon - Fri, 9am - 6pm (EST)

Menu