The $20 Million Blind Spot: Why Hospitals Should Consider Cybersecurity Before They Buy

Join the Aspen Policy Academy mailing list to learn more about us and our fellows (you’ll receive one email a week).

{"action":"swipe","clientId":"ac5a79b3-027f-4735-ad6e-8ed9a01adc94","controls":["submits"],"property":"newsletter","recipients":"","receipts":"","rules":[],"subject":""}

{"type":"email","format":[{"label":"month"},{"label":"day"},{"label":"year"},{"label":"hour"},{"label":"minute"}],"filetypes":[],"options":[],"title":"Email Address","description":" ","placeholder":"","helper":false,"abilities":["required"],"beacons":[],"preset":"","identifier":"email_address","evaluate":[],"minimum":0,"maximum":200,"expression":"^[a-zA-Z0-9.]{2,}@[a-zA-Z0-9]{3,}\\.[A-Za-z]{2,}$","count":1}

Email Address

{"type":"input","format":[{"label":"month"},{"label":"day"},{"label":"year"},{"label":"hour"},{"label":"minute"}],"filetypes":[],"options":[],"title":"First Name","description":" ","placeholder":"","helper":false,"abilities":["required"],"beacons":[],"preset":"","identifier":"first_name","evaluate":[],"minimum":0,"maximum":200,"expression":"(.|\\n){1,}?","count":1}

First Name

{"type":"input","format":[{"label":"month"},{"label":"day"},{"label":"year"},{"label":"hour"},{"label":"minute"}],"filetypes":[],"options":[],"title":"Last Name","description":" ","placeholder":"","helper":false,"abilities":[],"beacons":[],"preset":"","identifier":"last_name","evaluate":[],"minimum":0,"maximum":200,"expression":"(.|\\n){1,}?","count":1}

Last Name

{"type":"check","format":[{"label":"month"},{"label":"day"},{"label":"year"},{"label":"hour"},{"label":"minute"}],"filetypes":[],"options":[{"label":"I want to learn how to change policy"},{"label":"I am a journalist"}],"title":"Focus","description":"Description of field","placeholder":"","helper":false,"abilities":["multiple"],"beacons":[],"preset":[],"identifier":159774919,"evaluate":[],"minimum":0,"maximum":200,"expression":"(.|\\n){1,}?","count":1}

Focus

Description of field

{"type":"check","format":[{"label":"month"},{"label":"day"},{"label":"year"},{"label":"hour"},{"label":"minute"}],"filetypes":[],"options":[{"label":"Washington DC area"},{"label":"New York City area"},{"label":"San Francisco Bay area"},{"label":"Los Angeles area"},{"label":"I'm in another location"}],"title":"Select your location","description":"Description of field","placeholder":"","helper":false,"abilities":[],"beacons":[],"preset":[],"identifier":736832383,"evaluate":[],"minimum":0,"maximum":200,"expression":"(.|\\n){1,}?","count":1}

Select your location

Description of field

By submitting this form, I agree that the Aspen Institute can collect, process, and retain limited personal information for administrative purposes; and that the Institute can share this limited personal information with its trusted service providers for program administration purposes. I consent to receiving email communications from the Aspen Policy Academy. I understand I can withdraw my consent at any time by contacting DataPrivacyLegal@aspeninstitute.org.

I agree to the Aspen Institute’s Terms of Use Agreement and acknowledge that I have read and understand the Aspen Institute Privacy Policy which provides additional information about how the Institute processes personal information, as well as rights I may have regarding the personal information the Institute maintains about me.

Thank you for signing up! Keep an eye on your inbox for our next weekly newsletter!

{"abilities":[],"action":"stack","className":"","columns":3,"controls":[],"exclude":[],"include":[{"custom.menu":"header-menu"}],"maximum":6,"property":"header","orders":["date","title","menu_order","post_type","post__in"]}

{"abilities":[],"action":"stack","className":"","columns":3,"controls":[],"exclude":[],"include":[{"custom.menu":"header-menu"}],"maximum":6,"property":"mobile","orders":["date","title","menu_order","post_type","post__in"]}

The $20 Million Blind Spot: Why Hospitals Should Consider Cybersecurity Before They Buy

Article Published September 26, 2025

This article originally appeared on DOTmed on September 26, 2025.

By Daniel Bardenstein

As cyberattacks recently paralyzed St. Paul’s city services and forced Kettering Health hospitals onto emergency reroute just a month before that, healthcare executives across the country are asking the same question: Are we next?

From my experience leading a company that secures hospitals, researching healthcare security policy with the Aspen Institute, and serving as cybersecurity lead for Operation Warp Speed, I’ve seen the challenges up close. During 2020 and 2021, I witnessed a devastating wave of ransomware attacks hitting hospitals already overwhelmed by COVID-19. The data suggests that most hospitals remain dangerously exposed—not despite their technology investments, but because of them.

Read the Full Article

{"abilities":[],"action":"swipe","className":"wide","columns":3,"controls":["arrows"],"exclude":[{"starter.postid":"28254"},{"default.postid":"26818"}],"filters":[],"include":[{"starter.termid":"120"},{"starter.termid":"231"}],"maximum":6,"meta":[],"property":"box","searching":"","sorts":[{"ordering.label":"date","evaluation.label":"\u2193","display":"Most Recent","label":"date \u2193 Most Recent"}],"sorting":[{"ordering.label":"date","evaluation.label":"\u2193","display":"Most Recent","label":"date \u2193 Most Recent"}],"orders":["date","title","menu_order","post_type","post__in","relevance"],"filtering":"","refiner":false,"total":58}

Aspen Policy Academy

The $20 Million Blind Spot: Why Hospitals Should Consider Cybersecurity Before They Buy

Browse Related Articles

Outcome-Based Contracting Reorients Government IT Acquisition Around Public Value and Mission Results

You Do Not Have to Be a Politician to Shape Policy. Mai Sistla Is Proving It.

The #1 AI Governance Mistake Schools Are Making