The FBI IC3 2025 Internet Crime Report, released in April 2026, recorded 278 ransomware complaints from healthcare, the most-targeted critical infrastructure sector, ahead of critical manufacturing and financial services, plus 182 healthcare data-breach complaints. Total cybercrime losses hit $20.9 billion, up 26 percent, with 63 new ransomware variants observed and Akira, Qilin, BianLian and RansomHub among the hardest hitters. The Bureau flagged a troubling uptick in AI-enabled cybercrime.

Healthcare has been near the top of these lists for years, and being first is still notable, because it means the sector mix of legacy technology, high-value data and low tolerance for downtime is exactly what attackers optimize for. Device makers are upstream of those hospitals. The security of what you ship is part of why a health system does or does not end up in next year count.