Forescout finds most healthcare devices lack post-quantum encryption readiness
Forescout Technologies analyzed roughly 2.5 million devices across more than 50 healthcare organizations and found widespread gaps in support for post-quantum cryptography. Only about half of IT devices supported SSH implementations capable of PQC, versus 16% of operational technology and just 6% of Internet of Medical Things devices such as patient monitors and insulin pumps. The firm also found over 5,500 Internet-reachable systems holding medical records and imaging data, only 31% of which used TLS 1.3, the protocol needed for current PQC standards.
GoKawiil's interpretation of the reporting above, not reported fact.
Because patient data and diagnostic records can stay sensitive for decades, encrypted information stolen today could later be decrypted once quantum computing matures, a risk commonly called 'harvest now, decrypt later.' The low readiness rates on medical devices and exposed systems suggest healthcare networks could face a prolonged period of vulnerability as quantum-safe standards roll out. This gap may push regulators and vendors to accelerate upgrades to legacy medical and IoT equipment.
- Forescout analyzed 2.5 million healthcare devices across 50+ organizations for PQC readiness.
- IoMT devices like insulin pumps and monitors showed only 6% readiness for post-quantum cryptography.
- Over 5,500 Internet-exposed systems hold medical records, but only 31% support TLS 1.3.
Source: darkreading.com — Jai Vijayan, 2026-10-06
Published there as: “Critical Healthcare Systems Aren't Quantum-Ready”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.