Exposed Medical Systems Create a Harvest-Now, Decrypt-Later Risk

More than 5,500 healthcare systems were exposed to the public internet in a new Forescout Research analysis of 2.5 million devices across more than 50 healthcare delivery organizations.

The exposed systems included electronic medical record and medical imaging infrastructure. Forescout found that only 31 percent supported TLS 1.3, the TLS version capable of supporting standardized post-quantum cryptography as implementations mature.

The near-term concern is “harvest now, decrypt later.” Attackers can collect encrypted medical data today and retain it until future advances make decryption practical. Patient histories, genetic information, imaging and diagnoses can remain sensitive for decades, giving adversaries a long time horizon.

Healthcare organizations do not need to predict the arrival of a cryptographically relevant quantum computer to act. They can inventory exposed systems, remove unnecessary internet access, identify long-lived sensitive data and map cryptographic dependencies now. Crypto-agility and migration planning are security controls, not speculative research projects.