Key Findings The amount and cost of cybersecurity events in healthcare-related organizations makes healthcare a unique industry. Only the financial (including FinTech) industry comes close to the breadth and depth of aacks faced. Despite (over)confidence of security leaders in healthcare, the data shows increasing need for vigilance. 10 $1.47 million years YoY increases in healthcare average cost of a cyberaack4 security breaches3 97% 10x 37% stolen healthcare data is 10x more of cyber events are email compromises, 1 of healthcare workers believe valuable than credit card data5 the most of any source in their org’s ability to defend against cyber aacks 1 24% 100,000,000 36% of all cyber events in first half of 2024 were people aected by a single breach of the world’s data will be healthcare 2 at Change Healthcare6 related by end of 20257 healthcare-related State of Health Security 2025 | 4

State of Health Security 2025 - Page 4 State of Health Security 2025 Page 3 Page 5