FBI Co-deputy Director Andrew Bailey discussed a rise in cyber and physical threats impacting health care. He discussed health care as the top critical infrastructure sector cybercrime target in 2025, how ransomware attacks have increased in recent years and how they have largely been conducted by Russian-speaking ransomware-as-a-service groups.  
 
“When these attacks hit, the downstream effects move very quickly,” Bailey said. “Ambulances are diverted from the hospitals that can no longer receive them. Elective surgeries are postponed; time-sensitive treatments, oncology, cardiac care — all delayed. At that point, we’re no longer talking about a data crime. We’re talking about physical harm to patients and the American public.” 
 
He also discussed violence against health care workers, as well as the rise of artificial intelligence and its use by malicious actors. In a conversation with John Riggi, AHA national advisor for cybersecurity and risk, Bailey said one concerning factor is that cyber actors have begun using AI to automate activities such as reconnaissance and intrusion, ultimately leading to the exploitation of systems. 
 
“The reconnaissance and the early sequencing can be done in an automated fashion now, which frees up the individuals behind the keyboard to do other things, so they can multitask — that’s problematic,” Bailey said. “Now the good news is that [if] the bad guys can use it on offense, we can use it on defense.” 

Headline
Health care and public health was the top sector targeted for cyberthreats in 2025, according to the FBI’s latest annual report on internet crimes. There were…
Headline
The Cybersecurity and Infrastructure Security Agency released an alert March 27 on a vulnerability in F5 BIG-IP Access Policy Manager software that is being…
Headline
The FBI released an alert March 20 warning of a technique used by cyber actors working on behalf of the Iranian government to conduct malicious cyber activity…
Headline
The Cybersecurity and Infrastructure Security Agency March 18 released an alert urging U.S. organizations to harden their endpoint management systems following…
Headline
The Health Sector Coordinating Council Cyber Working Group and Health-ISAC (Information Sharing and Analysis Center) will host a joint cybersecurity event July…
Headline
Stryker, a medical technology company that provides services and products for hospitals, was disrupted globally by a cyberattack, the company announced March…