u/Substantial_Phone_36

Been going down a rabbit hole on healthcare cybersecurity lately and came across some stuff that’s honestly a little concerning.
Apparently smaller medical practices are starting to get hit with AI-powered reconnaissance attacks and automated fraud calls, not just traditional hacking attempts.
On top of that, there’s talk about:
New waves of HIPAA enforcement tightening in 2026
The idea that most clinics still rely on outdated/shared infrastructure instead of controlled/private environments
And a lot of practices assuming cyber insurance will save them… when it might not anymore
What surprised me most is how much of this seems to hit mid-size and smaller clinics, not just big hospital systems.
So I’m curious:
Are smaller practices actually this exposed right now?
Is AI really changing the threat landscape that fast, or is this being overhyped?
What are people actually doing in the real world to protect EHR/EMR systems?
Would love to hear from anyone in healthcare IT or managing clinics.