2026 Enterprise Cybersecurity Survey: Healthcare Faces Dual Threats From Phishing and AI

Taiwan’s healthcare institutions hold medical records and operate core clinical systems, meaning a cybersecurity incident could simultaneously affect personal data, medical services and operations. In its 2026 CIO and CISO Survey, iThome assessed system, personnel and AI risks together. The findings show that as hospitals accelerate cloud adoption, upgrade hospital information systems and deploy automation, their defenses must address not only ransomware but also cloud configuration, third-party and AI governance risks.

iThome published its healthcare risk map on May 3, 2026. The survey ran from January 1 to 29 and received 396 valid responses, 57% of them from the most senior corporate cybersecurity executives. The results showed that phishing and social engineering were considered more likely to occur over the next year than ransomware, while AI risk was assessed as a separate category. Another seven system threats and six personnel threats fell into the high-impact, high-risk category. The report did not disclose any figures for losses or investment.