A Comprehensive Review of Cyber-Attacks in Healthcare

Abstract

Healthcare systems constitute an essential part of national critical infrastructure, providing medical services, emergency response, and long-term patient care. The widespread integration of digital technologies—such as electronic health records (EHRs), telemedicine, Internet-connected medical devices, and cloud-based platforms—has modernized clinical workflows but also expanded the attack surface available to cybercriminals. Over the past decade, cyber-attacks targeting healthcare organizations have tripled, making the sector one of the most frequently attacked worldwide. These incidents can compromise sensitive patient information, disrupt essential medical services, jeopardize patient safety, and hinder a nation’s capacity to respond to public health emergencies.

This narrative review examines the evolution of healthcare cyber-attacks since 2009; their impacts on patients, providers, and hospital infrastructure; and the methods commonly used by attackers. It also highlights hospital responses during prolonged system outages and offers recommendations for improving cybersecurity preparedness.