Health care faces new cybersecurity threats from unregulated AI agents

Health care systems are grappling with a growing cybersecurity risk as the use of AI agents outpaces their ability to monitor and control the technology. According to a survey by Imprivata, 72% of health industry leaders reported deploying AI tools or agents without formal IT approval. Jaren Day, group director of cybersecurity at KLAS Research, emphasized the need for health care organizations to define what AI agents are authorized to do after access is granted. Unlike traditional software, these agents can independently plan, launch workflows, and act, making them a unique challenge. The industry is struggling to establish guardrails, as AI adoption accelerates to streamline administrative tasks, reduce clinician burnout, and improve care coordination. Rural hospitals and clinics, which often have limited budgets and overworked staff, may benefit most from AI solutions but could be particularly vulnerable to risks. The Imprivata survey highlights the need for health care organizations to move beyond verifying access to defining what agents are allowed to do. As AI agents increasingly access systems and take action, the focus of cybersecurity efforts is shifting toward monitoring and controlling their activities. This shift underscores the urgency for health care providers to address the growing risks associated with unregulated AI deployment.