Healthcare Data Breaches Surge in 2025, But Exposed Records Decline Report Reveals Shifting Threat Landscape In 2025, healthcare data breaches more than doubled compared to the previous year, yet the number of exposed patient records dropped significantly, signaling a shift in cyberattack strategies. According to Fortified Health Security’s latest report, the sector faced a 112% increase in breach volume, with hacking and IT incidents rising by 98% year-over-year. Unauthorized access and disclosure incidents surged even further 240% driven by misdirected communications, improper internal access, and emerging risks from shadow AI. While large-scale breaches like 2024’s Change Healthcare incident once dominated headlines, 2025 saw a rise in smaller, more frequent attacks, particularly ransomware, identity compromise, and third-party vulnerabilities. The report noted that this trend strains healthcare organizations through repetitive disruptions rather than massive data leaks, emphasizing the need for operational resilience and rapid response capabilities alongside traditional data protection. Despite progress in limiting breach size, gaps in cybersecurity defenses persist. Only 4% of surveyed leaders expressed strong confidence in their third-party risk assessments, while 43% lacked formal processes for retraining staff on security fundamentals. Barriers included time constraints and insufficient leadership support. Confidence in incident detection and recovery also remained low, with just 6% of respondents feeling very prepared. Looking ahead, the report highlights shadow AI and escalating breach volumes as key threats for 2026, though industry leaders remain optimistic about cross-sector collaboration, leadership engagement, and AI-driven security innovations. The findings underscore a critical evolution in healthcare cyber risks where frequency, not scale, now defines the threat.