Lawmakers weigh terrorism designations and homicide charges for hospital ransomware attacks

Summary
At a House hearing, former FBI cyber official Cynthia Kaiser proposed terrorism designations and clearer DOJ guidance on homicide charges for hospital ransomware attacks. FBI figures cited show healthcare incidents rose from 238 in 2024 to 460 in 2025.
Key points
- Former FBI cyber official Cynthia Kaiser proposed considering terrorism designations for ransomware attacks targeting hospitals.
- Kaiser also urged clearer Justice Department guidance on pursuing homicide charges when a hospital ransomware attack results in a death.
- FBI figures cited in the article show healthcare-sector ransomware incidents rose from 238 in 2024 to 460 in 2025, making it the most targeted sector.
- A 2023 University of Minnesota study estimated hospital ransomware attacks were responsible for dozens of Medicare patient deaths.
- German authorities investigated negligent homicide after a death following a 2020 ransomware attack but ultimately brought no charges.
Article Details
- Event Type
- Lawmakers debated proposals to increase penalties for ransomware attacks on hospitals, including terrorism designations and homicide charges when an attack results in death.
- Impact
- FBI statistics cited in the article show healthcare-sector attacks rose from 238 in 2024 to 460 in 2025, making healthcare the most targeted sector. A 2023 University of Minnesota study estimated hospital ransomware attacks were responsible for dozens of Medicare patient deaths. Mississippi health care clinics closed following a February ransomware attack. German authorities opened a negligent homicide investigation after a death following a ransomware attack in 2020, but decided against charges.
People
Cynthia KaiserAt a House Homeland Security hearing, the former FBI cyber official proposed terrorism designations for some hospital ransomware attacks and clearer Justice Department guidance on homicide charges.Lou CorreaThe top Democrat on Guest's subpanel commented during the hearing on applying existing legal language to cyberattacks.Michael GuestThe chair of the House Homeland Security Committee's Border Security and Enforcement subcommittee expressed support for severe penalties for people who target the U.S. health care system.
