Evidence map›Paper›PMID 41345652›Full record

ArticleBMC health services research2025

The U.S. health system vulnerabilities.

Nataliya D Brantly

Abstract read
In one paragraph

Article in BMC health services research, 2025. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Cited by 1 paper.

0numbers the graph read from it
0cells of the map it votes in
1citing papers in PubMed
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

1 citing paper in PubMed.

  1. Cybersecurity in Healthcare: Ensuring Patient Safety and Data Privacy.Journal of multidisciplinary healthcare · 2026
    Article
4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

1 author.

Nataliya D BrantlyGovernment & International Affairs (GIA), School of Public and International Affairs, Virginia Polytechnic Institute and State University, 223 Major Williams Hall, 220 Stanger Street, Blacksburg, VA, 24061, USA. nbrantly@vt.edu.

Funding

No grant is acknowledged in the PubMed record.

6 · The paper itself

Abstract

backgroundThe increasing integration of health information technology (health IT) into the U.S. healthcare system has brought both opportunities for improvement and new vulnerabilities. The 2024-2030 Federal Health IT Strategic Plan emphasizes equitable data access, quality representative data, and the responsible use of artificial intelligence (AI) to improve health outcomes. Yet, the growing complexity of digital infrastructures has amplified risks related to privacy and the security of protected health information (PHI). This study examines U.S. health system vulnerabilities by analyzing reported PHI breaches and situating them within evolving federal health IT priorities.

methodsThis mixed-methods descriptive study combines quantitative analysis of the U.S. Department of Health and Human ServiCE's (HHS) Breach Portal data (2013-2023) with a qualitative review of federal policy and regulatory developments related to health IT. Breaches of PHI affecting more than 500 individuals were included, consistent with HHS reporting requirements. Duplicate and incomplete entries were removed. Breaches were categorized by cause and type. Quantitative results describe frequencies, proportions, and trends, while qualitative analysis of policy documents and breach narratives contextualizes these findings within the broader framework of digital health governance.

resultsFrom 2013 to 2023, the total number of reported PHI breaches and the share attributed to hacking and IT incidents increased markedly, while those involving theft, loss, or improper disposal declined. Healthcare providers accounted for most reported breaches, followed by business associates and health plans. Despite advances in interoperability and automation, the healthcare sector remains disproportionately affected by cybersecurity incidents. The qualitative analysis reveals persistent gaps between federal strategic goals and the practical implementation of privacy and security safeguards across healthcare.

conclusionThis study underscores the paradox of digital transformation: while health IT adoption improves efficiency, coordination, and data sharing, it simultaneously exposes the healthcare system to new risks. Strengthening system resilience requires harmonized governance, continuous monitoring, and greater investment in digital literacy. As AI use and automation expand, policy reforms must ensure that innovation does not compromise patient privacy or deepen inequities. These findings contribute to a better understanding of health system vulnerabilities and offer insights for enhancing the security and resilience of the U.S. health system.

Indexed as

Computer SecurityConfidentialityDelivery of Health CareMedical InformaticsArtificial IntelligenceHumansUnited StatesUnited States Dept. of Health and Human ServicesDigital healthElectronicHealthcareHealth ITHealth systemSecurity

Identifiers

PMID41345652
PMCPMC12781349

What OpenQuestion holds

Textmetadata
LicenceCC BY-NC-ND
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.