India’s healthcare sector is undergoing rapid digital transformation driven by the ABDM, EHRs, telemedicine, and connected medical devices. While these advancements are improving access and efficiency, they have also expanded the sector’s exposure to cyber threats. Rising incidents of ransomware, data breaches, and supply-chain attacks highlight persistent gaps, including fragmented IT infrastructure, uneven cybersecurity awareness, weak data protection practices, and varying levels of compliance with regulations such as the DPDP Act 2023 and CERT-In directions. This report examines these challenges through three lenses: People, Providers, and the broader Health System, to provide a clear picture of India’s current cybersecurity posture.

To support healthcare organizations in strengthening their defenses, the report introduces a structured Cybersecurity Readiness Framework tailored to the Indian healthcare context. The framework evaluates readiness across three dimensions – Access, Capability, and Trust, allowing hospitals and other providers to benchmark their current maturity and identify targeted areas for improvement.