Healthcare Data Fragmentation Fuels Cybersecurity Risks Amid Interoperability Challenges

Fragmented health data across multiple systems like EHRs, wearables, and cloud platforms creates inconsistent security controls and expands attack surfaces. Experts warn that breaches often stem from third-party vendors rather than hospitals directly, highlighting vulnerabilities in data sharing practices. Solutions include adopting integrated platforms and strengthening governance over system connections to improve both security and efficiency.

In October 2026, during Cybersecurity Awareness Month, healthcare cybersecurity experts highlighted a growing crisis rooted in data fragmentation across electronic health records (EHRs), wearables, cloud platforms, and third-party vendors. The issue stems from decades of incremental system adoption without standardized integration, resulting in inconsistent security controls and expanded attack surfaces. Breaches increasingly originate not from hospital networks directly but through business associates—such as billing firms, transcription services, and cloud providers—underscoring vulnerabilities in data sharing practices. Experts like Chris Logan of Zscaler emphasize that secure data exchange must balance accessibility with protection, while John Atkinson of AxisCare advocates for integrated platforms to reduce reliance on custom integrations. Leigh Burchell of the EHR Association points to a critical gap: outdated identity management, where terminated employees retain access due to disconnected systems, a flaw the proposed HIPAA Security Rule updates aim to fix by mandating real-time access termination within one hour and requiring written technology asset inventories. Jeremy Carriger of Arcadia warns that AI-enabled tools and shadow AI are compounding risks by altering data flows without oversight. Jeffrey Eyestone of P-n-T Data Corp. reframes the problem not as technical wiring but as a data engineering challenge—where clinical notes, imaging, and payer-specific forms mus