Cybersecurity Landscape of the Health Sector in Latin America and the Caribbean, 2022–2026: Incidents, Emerging Threats, and Institutional Priorities Toward 2028

This technical report examines cybersecurity incidents, risk patterns, and emerging threats affecting the health sector in Latin America and the Caribbean between 2022 and 2026, with a forward-looking perspective toward 2028. Based on a structured narrative review and comparative analysis of selected regional cases, it explores the consequences of cyber incidents for healthcare continuity, sensitive health data, digital infrastructure, identity and access management, and third-party dependencies.

The report identifies ransomware and extortion, supply-chain and third-party breaches, compromised credentials, phishing, exploitable vulnerabilities, clinical data exposure, cloud and API risks, connected medical devices, and AI-assisted fraud as priority concerns. It also distinguishes between confirmed evidence, reasonable inference, and speculation regarding the emerging role of artificial intelligence in offensive cyber operations.

The publication proposes an institutional roadmap organized around governance, identity and access, operational resilience, incident preparedness, and third-party risk management. Its recommendations are intended for health authorities, healthcare providers, laboratories, insurers, technology vendors, cooperation agencies, and other stakeholders working to strengthen cybersecurity and digital resilience across the region.