# Healthcare Cybersecurity Act of 2025

Hospitals, clinics, and other healthcare facilities are getting hacked at alarming rates. Between 2018 and 2022, major cyberattacks on healthcare systems jumped by 93 percent, and in 2022 alone, nearly 42 million people had their personal health information exposed through data breaches. When hackers break into these systems, it's not just about stolen information—it can delay patient care, disrupt surgeries, and put lives at risk. This bill is designed to help fix that problem by making the federal government's cybersecurity experts work more closely with hospitals and health systems to prevent and respond to these attacks.

The bill creates a dedicated liaison—a cybersecurity expert from the federal Cybersecurity and Infrastructure Security Agency (CISA)—who will work directly with the Department of Health and Human Services to coordinate defenses across the entire healthcare sector. This person will help hospitals understand cyber threats, share information about attacks as they happen, and make sure healthcare facilities get the latest security tools and training. The bill also requires the government to update its healthcare cybersecurity plan to address specific challenges that hospitals face, especially smaller rural hospitals that often lack the resources to hire their own cybersecurity teams.

Additionally, the bill directs the federal government to offer free training to hospital administrators and IT staff on how to protect their systems and patient data. It also calls for identifying which hospitals and health systems are at highest risk so the government can send extra help to those facilities. The bill requires several reports to Congress about what support is being provided and what resources are available, but importantly, it doesn't authorize any new spending—agencies must work with existing budgets to implement these improvements.