- In January 2025, the U.S. Department of Health and Human Services (HHS) proposed major revisions to the HIPAA Security Rule, mandating measures such as multi-factor authentication, endpoint encryption, and annual risk assessments. The updated rule aims to modernize healthcare cybersecurity in response to increased ransomware attacks. The proposed implementation would cost healthcare providers approximately USD 9 billion in the first year and USD 6 billion annually thereafter
- In May 2024, the U.S. Advanced Research Projects Agency for Health (ARPA-H) launched the UPGRADE initiative (Universal Patching and Remediation for Autonomous Defense), providing hospitals with tools such as digital twins, automated patch deployment, and real-time threat modeling. This initiative addresses persistent vulnerabilities in outdated medical devices and systems used across healthcare institutions
- In March 2024, Honeywell International Inc. successfully deployed Phase One of the Bengaluru Safe City Project in India, integrating over 7,000 AI-enabled surveillance systems across healthcare and public safety zones. The project includes centralized security management, highlighting the role of Health Cybersecurity in modern urban resilience strategies
- In May 2022, Clearwater acquired CynergisTek, which provides cybersecurity, compliance, and IT services to help highly regulated industries tackle security and privacy issues, for USD 17.7 million. This partnership strengthens CynergisTek's people-centric approach to cybersecurity, privacy, and audit and its essential role in serving the healthcare industry and its clients
- In November 2021, With its plan to purchase ReaQta, a Dutch cybersecurity threat detection and response company, IBM Security announced an extension of its cybersecurity threat detection and response capabilities. Endpoint security solutions from ReaQta use artificial intelligence (AI) to automatically identify and control threats while staying invisible to attackers. This deal will strengthen IBM's position in the extended detection and response (XDR) industry, consistent with the company's aim of providing security through an open approach that spans diverse technologies, data, and hybrid cloud settings
