Japan’s Health, Labor and Welfare Ministry plans to strengthen cybersecurity at hospitals amid a growing number of cyberattacks on medical institutions. The ministry has included ¥13.7 billion (₹826 Crore) in its fiscal 2027 budget request to improve network security and deploy cybersecurity specialists.
Why is Japan strengthening hospital cybersecurity?
Medical institutions have faced difficulties in implementing effective cybersecurity because different medical devices often use multiple IT vendors. This can leave hospitals with numerous network connections linking their systems to the outside world.
The ministry plans to support hospitals in consolidating these external connection points, making networks easier to monitor and allowing systems to be isolated more quickly if an attack occurs.
Proposal for Conducting Cyber Crisis Drill, Tabletop Exercise (TTEx) & CCMP Readiness Exercise
How will the ₹826 crore budget be used?
The proposed funding will support measures to protect hospital networks and deploy cybersecurity specialists.
The request will be included in the government’s newly established investment framework aimed at making Japan “stronger and more prosperous,” championed by Prime Minister Sanae Takaichi’s Cabinet.
Hospitals will be encouraged to consolidate external network connections. They will be able to outsource this work to private contractors, although subsidy limits will be based on factors including the number of beds available.
What cyberattacks have Japanese hospitals faced?
Medical institutions in Japan have frequently been targeted by cyberattacks involving ransomware.
An attack on Osaka General Medical Center in 2022 caused its electronic record system to malfunction, forcing the facility to restrict surgeries and outpatient care.
In February, the personal information of about 130,000 patients was leaked following a cyberattack on Nippon Medical School Musashikosugi Hospital in Kawasaki.
How will cybersecurity specialists help hospitals?
The ministry plans to provide support for dispatching cybersecurity experts to hospitals when a cyberattack occurs.
Because medical institutions generally find it difficult to employ such specialists permanently, the ministry intends to encourage the use of professionals registered with the Information-technology Promotion Agency, Japan.
These specialists would be matched with individual hospitals when their expertise is required.
Will hospital staff receive cybersecurity training?
The ministry will also subsidize the cost of training hospital staff as part of the planned cybersecurity measures.
The approach is intended to strengthen hospitals’ ability to respond to cyber incidents while providing access to specialist expertise when attacks occur.
Why is healthcare being treated as critical infrastructure?
Japan’s amended law on promoting economic security measures added healthcare to the list of critical infrastructure.
The change has increased the importance of protecting medical institutions and their systems as the government strengthens cybersecurity across the healthcare sector.
Which hospitals will receive the new cybersecurity measures?
Hospitals covered by the law are expected to be selected from among 88 advanced treatment hospitals with 400 or more beds.
The ministry plans to assign specialist cybersecurity personnel to these hospitals. Around 20 hospitals are expected to undergo inspections under the fiscal 2027 budget.
About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.
