WASHINGTON, DC — U.S. Senator Angus King (I-ME), co-chair of the Cyberspace Solarium Commission, is leading the introduction of a bipartisan bill to improve cybersecurity in health care. The Healthcare Cybersecurity Act would direct the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Health and Human Services (HHS) to collaborate on improving cybersecurity and make resources available to non-federal entities relating to cyber threat indicators and appropriate defense measures. It would also create a special liaison to HHS within CISA who would coordinate during cybersecurity incidents. The legislation is cosponsored by Senators Jacky Rosen (D-NV) and Todd Young (R-IN).

Recent reporting has indicated an exponential increase in cybersecurity attacks against healthcare systems across the country, including the U.S. Department of Health and Human Services (HHS). In 2023, approximately 133 million people had their health data, such as Medicare beneficiary data, social security numbers, and medical records breached. In Maine, Northern Light Health computers were compromised via a server breach, but patient records were not affected. Northern Light Health is one of the latest Maine health care systems, including Mount Desert Island Hospital and others, to become victim to a cyber attack — underscoring the importance of strong cybersecurity efforts to protect Maine patients from bad actors.

“Healthcare cyberattacks are a growing threat nationwide, and also hit home for Maine, where several major healthcare systems have been compromised in recent years due to cybercrimes,” said Senator King, co-chair of the Cyberspace Solarium Commission. “These attacks and breaches of data can literally mean the difference between life and death for patients, significantly impact hospital operations, and — with the average hack costing millions to address — increase healthcare prices across the board. The bipartisan Healthcare Cybersecurity Act will take important steps toward protecting patients’ data and healthcare provider capabilities, and bolstering our cybersecurity infrastructure and response.”

“In recent years, hospitals and other health care facilities in Indiana and across America have experienced a dramatic increase in cyberattacks,” said Senator Young. “Our bipartisan bill will take critical steps to strengthen cybersecurity infrastructure and better protect patients’ personal data.”

“The health care industry is still reeling from recent cyberattacks, and rural and small health care entities in Nevada have been particularly affected,” said Senator Rosen. “It’s imperative that we take measures to improve cybersecurity in the health care sector to prevent data breaches and protect Nevadans, which is why I’m introducing this bipartisan legislation. I’ll keep working to strengthen the cybersecurity of this critical sector and keep people safe from malicious actors.”

As Co-Chair of the Cyberspace Solarium Commission (CSC), Senator King is recognized as one of Congress’ leading experts on cyberdefense and as a strong advocate for a forward-thinking cyberstrategy that emphasizes layered cyberdeterrence. Since it officially launched in April 2019, dozens of CSC recommendations have been enacted into law, including the creation of a National Cyber Director.

Together with Solarium Co-Chair Representative Mike Gallagher, King previously urged the Biden Administration to better protect the public health sector from cyber threats and called for stronger, collaborative efforts to address the growing threat. Most recently, Senator King introduced the bipartisan Strengthening Cybersecurity in Health Care Act to require the Department of Health and Human Services (HHS) perform consistent evaluations of its cybersecurity systems, and provide biannual reports on its current practices and progress on future safety procedures it is working to implement.

###