IT security in healthcare: 9 out of 10 healthcare operations affected by security incidents

In a new report from SOTI reports 89 % of IT managers in Swedish healthcare that their business has been exposed to at least one security incident in the past year. Seven out of ten report external intrusions – an unchanged high level compared to last year. The proportion that has experienced internal data incidents has decreased slightly. Despite glimmers of hope, concerns about IT security are increasing. Outdated systems are increasingly being identified as a crucial risk factor.

SOTI's healthcare report “Healthcare's digital dilemma: Calculated risk and hidden challenges revealed” is based on interviews with 150 Swedish IT decision-makers and provides a current picture of technology, security and digitalization within Swedish healthcare.

Security incidents remain at a high level – but there are glimmers of hope

This year's report reveals that external security incidents in healthcare remain at a high, consistent level. 7 out of 10 businesses (71 %) report having suffered external intrusions or DDoS attacks in the past year, exactly the same level as in 2024.

However, internal security incidents have decreased overall. In 2024, 69 % stated that they had experienced some form of internal security incident, this year the corresponding figure is 60 %.

It is primarily the planned internal incidents that have decreased. This year's report shows a significant decrease of 54 % in one year – from 41 % in 2024 to 19 % this year. The unintentional incidents remain at about the same level. 5 out of 10 (52 %) report having experienced unintentional incidents during the year. The corresponding figure was 47 % last year.
 

"IT security in healthcare remains under severe pressure and the pressure on the healthcare sector's IT and security departments is increasing. Healthcare owns a huge number of technical devices that can pose potential vulnerabilities, while sensitive patient data is an attractive target for cybercriminals. To counteract and prevent attacks, modern, secure systems are required that are equipped for today's threat landscape,” says Stefan Spendrup, Head of Northern and Western Europe at SOTI.

IT managers increasingly concerned about security

At the same time, the issue of security is becoming increasingly important for healthcare IT organizations. 27% of respondents state that data security is their biggest source of concern, up from 21 % in 2024. Almost one in five respondents (19 %) still lack the ability to detect new devices connecting to the network. While this is an improvement over last year’s 28 %, it still poses a significant security risk.

Outdated systems identified as a risk

In this year's report, outdated IT systems emerge as an increasingly clear risk factor for IT security in healthcare. 98% of respondents state that their organization uses outdated systems (97% last year). However, awareness of the risks of outdated systems has increased significantly: 55% now believe that outdated systems make their networks more vulnerable to security incidents, compared to only 25% last year. This is a more than doubled proportion, indicating a growing awareness of how outdated IT infrastructure affects security.

"It is gratifying that more people are realizing that there is an important connection between systems and security. The fact that many healthcare operations are stuck in older systems makes it very difficult for them to have control over their IT environment. With modern IT solutions, healthcare can gain insight into all devices and applications in real time and thus act quickly on deviations and problems. In an operation where every minute counts, IT security must also be proactive." says Stefan Spendrup.

Summary of the year's results

89 % states that their operations have had at least one security incident since 2023 (91 % 2024)

71 % has suffered external intrusions or DDoS attacks (unchanged from 2024)

60 % have experienced internal security incidents (69 % in 2024)
- 52 % accidental (47 % 2024)
- 19 % planned (41 % in 2024)

98 % states that they have outdated IT systems (97 % 2024)

55 % says outdated technology increases vulnerability (25 % 2024)

27 % states that data security is the biggest IT-related concern (21 % 2024)

19 % cannot discover new devices on the network (28 % 2024)

Download the report here: Healthcare's digital dilemma: Calculated risk and hidden challenges revealed 

Report methodology
SOTI's care report 2025 is based on an international survey with 1,750 IT decision-makers in eleven countries, providing a current picture of how the healthcare sector is being digitized. The survey included 200 respondents each in the US and UK, as well as 150 respondents in Sweden, Canada, Mexico, Germany, France, the Netherlands, Australia, Italy and Spain.

About SOTI
SOTI is a recognized innovator and industry-leading provider of mission-critical mobility solutions. With its innovative product portfolio Consisting of smart, fast and reliable solutions, SOTI improves and streamlines customers' mobile operations, maximizes ROI and minimizes downtime. With over 17,000 customers globally, SOTI has established itself as the obvious provider of mobile platform services in the management, security and support of business-critical devices. Thanks to world-class support, SOTI customers can take their mobility to a whole new level. For more information, visit soti.se.