Despite improved visibility into cybersecurity threats, healthcare organizations struggle to close identified gaps

ID 213710213 © Anyaberkut | Dreamstime.com

New report finds healthcare organizations finding more cyber risks than they can fix

On Tuesday, July 14, Fortified Health Security, a Best in KLAS managed security services provider (MSSP), released its 2026 Mid-Year Horizon Report. The report highlights a growing challenge for the healthcare sector, as organizations gain clearer visibility into cybersecurity risk yet struggle to close critical gaps quickly enough to keep pace with the volume and severity of identified risks.

Key findings from the report:

  • A risk remediation rate of 6.4 percent. Fortified’s assessment data show the overall risk remediation rate dropped to 6.4 percent, down from 23.3 percent year over year in Q1, signaling that healthcare organizations are identifying more risk while closing less of it.
  • An increase of 60 percent in critical and high-risk findings. Over the same period, the average healthcare organization saw a 60 percent increase in critical and high-risk findings, widening the gap between cybersecurity visibility and remediation capacity.
  • Six times more cybersecurity supply chain risk management findings. Cybersecurity supply chain risk management findings are on track to reach 6 times the 2025 total, with 63 percent rated critical or high.
  • Four times as many findings in identity management, authentication, and access control. These findings are tracking toward 4 times the 2025 total, with 64 percent rated critical or high.
  • Remediation is becoming a defining measure of cyber resilience. As healthcare organizations improve visibility, the key challenge is shifting from identifying risk to prioritizing and reducing it quickly enough to protect operations and patient care.

“The findings in this year’s Mid-Year Horizon Report show that risk is not just increasing in volume, it is becoming harder to resolve at the pace healthcare requires,” Dan L. Dodson, CEO at Fortified Health Security, said in a statement.

About the Author

Pietje Kobus-McAllister

Pietje Kobus-McAllister

Pietje Kobus-McAllister has an international background and experience in content management and editing. She studied journalism in the Netherlands and Communications and Creative Nonfiction in the U.S. Pietje joined Healthcare Innovation in January 2024.

Sign up for our eNewsletters

Get the latest news and updates

What Clinical Groups Told HHS They Need to Accelerate AI Adoption

RFK Jr. Cancels Nearly $500M in mRNA Vaccine Contracts

Healthcare Providers Rapidly Adopting Verizon Neutral Host and Private 5G Combo Networks

Staying Connected -- On Your Own Phone, Tablet or Wearable