New cybersecurity measures may be on the horizon for healthcare firms in the US, as the Department of Health and Human Services (HHS) proposes enhanced regulations to safeguard patients’ personal data and company information. These new directives, estimated to cost $9 billion in the initial year, focus on implementing security protocols like routine vulnerability assessments, data encryption, and multi-factor authentication. Mandatory anti-malware software usage and network segmentation are also part of the proposed requirements to fortify sensitive data handling systems. Despite the hefty price tag, Deputy National Security Advisor Anne Neuberger emphasizes the critical need for these safeguards, citing a significant rise in security breaches affecting healthcare organizations in recent years. The escalating threat landscape has pushed hospitals into precarious situations, with ransomware attacks compromising millions of Americans’ confidential health records, underscoring the urgency for fortified cyber defenses in the healthcare sector.