Healthcare’s Data Breach Victory Lap Gets Crashed by Quantum Computing

The healthcare industry just pulled off something remarkable: its data leaders and security teams actually got better at securing its data. As a result, healthcare data breaches in the sector plummeted from 37% in 2021 to just 12% today, according to Thales’ 2025 Data Threat Report for Healthcare and Life Sciences.

But wait, there’s no time to celebrate. It seems that while hospitals and pharmaceutical companies were busy plugging yesterday’s security holes, tomorrow’s threats are already knocking at the door.

The culprits this time aren’t your garden-variety hackers with phishing schemes. They’re quantum computers and generative AI, emerging technologies that promise to revolutionize medicine while simultaneously threatening to crack open every encrypted patient record like a pistachio shell.

Two-thirds of healthcare firms fear quantum encryption compromise

Here’s the paradox keeping healthcare data leaders and security chiefs awake: 67% of the 562 healthcare, biotechnology, and pharmaceutical professionals surveyed by S&P Global Market Intelligence’s 451 Research worry about future encryption compromises from quantum computing. Meanwhile, 69% cite the breakneck pace of AI development as their top security concern. The sector is essentially watching two freight trains barreling toward each other, hoping they’ll arrive at different times.

The recent security improvements came largely from unglamorous blocking and tackling. Multi-factor authentication (MFA) adoption in healthcare jumped from 21% to 57% since 2021, proving that sometimes the boring solution actually works. But those gains feel almost quaint against what’s coming.

Healthcare cloud security lags behind data sensitivity

Consider the healthcare cloud security problem. Nearly half (47%) of all healthcare cloud data is classified as sensitive. This includes your medical history, insurance details, and prescription records. Yet only 4% of healthcare operators have encrypted at least 80% of that sensitive data. Worse, 27% of respondents admitted they have little or no confidence in knowing where their data actually lives. It’s like losing track of your house keys, except the keys unlock millions of patient files.

The infrastructure complexity isn’t helping. A third (32%) of healthcare operators now manage more than 500 APIs, each of which is a potential vulnerability. Only 15% found DevSecOps secrets management tools highly effective at preventing breaches from compromised credentials.

The healthcare industry knows what’s coming. Nearly 58% of operators are already prototyping or evaluating post-quantum cryptography algorithms designed to withstand attacks from quantum computers that don’t technically exist yet in a practical form. It's like buying insurance for a hurricane that weather models predict will arrive in five years.

Looking for a vaccine for AI data security chaos

Healthcare organizations see GenAI also as part of the answer. 68% have invested in GenAI-specific security tools, with another 18% allocating additional budget for them.

But their concerns go beyond decryption. 65% worry about AI models and data integrity, and 60% question the trustworthiness of AI systems. When your diagnostic algorithms start making treatment recommendations, you need absolute certainty that they haven’t been poisoned.

The regulatory landscape adds another layer. 58% of healthcare operators are pursuing digital sovereignty initiatives to ensure data compliance with local and international laws. Nearly half (46%) believe encryption and key management alone will satisfy these requirements, which is an optimistic assumption given that quantum computers might eventually render current encryption standards obsolete.

The Thales report reveals an industry caught in an awkward transition: celebrating hard-won data security victories while racing to prepare for threats that could make those victories irrelevant. Healthcare data leaders and security leaders must now defend against both today’s attackers and tomorrow’s quantum-powered codebreakers. It’s progress and peril, wrapped in the same package.

Image credit: iStockphoto/comzeal