Protecting Healthcare as National Critical Infrastructure in Times of Uncertainty
The world has changed around us in ways we could not have predicted. Geopolitical tensions that once seemed far away are now prompting European governments to strengthen critical infrastructure and defence capabilities. Our borders—both physical and digital—face constant pressure from multiple threats. From cyber-attacks that can shut down entire regions to climate disasters that overwhelm emergency services, we now have clear evidence that the systems we rely on are more fragile than we once believed. In this uncertain environment, one fact has become undeniably clear: healthcare systems are not simply essential services—they are critical national infrastructure and require the same level of protection we give to power grids, financial networks, and defence systems. Yet we often still treat hospitals and health networks as standalone institutions rather than recognising them as the strategic national assets they are.
Healthcare’s digital transformation has opened up remarkable possibilities—enabling precision health, improving patient care, and advancing medical research. However, this transformation has also introduced new vulnerabilities that hostile actors could exploit.
Health data is not just valuable—it can be weaponised. Patient records contain intimate details that can be used for blackmail, identity theft, or social manipulation. Genetic information reveals family vulnerabilities that could be exploited for generations. Medical histories expose mental health conditions, addiction issues, and chronic diseases that could ruin careers or relationships if used maliciously. We have seen ransomware attacks shut down hospital networks, forcing emergency departments to turn away patients and delaying critical surgeries. These are not isolated incidents—they are part of a growing pattern in which healthcare systems become prime targets precisely because they represent critical infrastructure. When hospitals go offline, people die. When health networks are compromised, entire regions lose access to life-saving care. When patient data is stolen or manipulated, trust in the entire healthcare system breaks down.
This goes beyond protecting individual hospitals or clinics—it is about safeguarding the health security of entire nations. A coordinated attack on healthcare infrastructure could destabilise a country just as effectively as targeting power grids or financial systems. In fact, it could be even more damaging, as healthcare affects every citizen and every community. The COVID-19 pandemic demonstrated how quickly health crises can spiral into economic and social catastrophes. Now imagine those same cascading effects triggered not by natural disaster, but by deliberate attacks on healthcare infrastructure. The national security implications are enormous.
Recognising these vulnerabilities and addressing healthcare as critical infrastructure requires consideration from two key perspectives. First, we must build the resilience and preparedness of our health systems against a growing range of threats. From climate crises and cyber warfare to geopolitical instability, these challenges demand coordinated responses that go beyond traditional organisational boundaries. Health leaders, defence experts, EU and multilateral agency representatives, hospital administrators, and infrastructure specialists must collaborate to examine how nations can strengthen their healthcare systems. How can public–private partnerships accelerate resilience-building? Which investments provide the greatest protective impact? How can cross-border cooperation strengthen collective defence while preserving national control over health systems?
Secondly, we must protect our most important asset but also our greatest vulnerabilities: data. As healthcare becomes increasingly data-driven, we must determine how to protect the digital foundations of modern medicine while preserving their transformative potential. This requires health leaders, defence experts, and cybersecurity specialists to develop strategies to secure health data infrastructure. The approach must encompass not only technical defences, but also the policy frameworks, international cooperation, and risk management strategies required to protect health data while enabling innovation.
Healthcare can no longer be viewed as a purely domestic issue, separate from broader security concerns. Recent global events have shown that health security equals national security. The systems that keep our populations healthy and our economies functioning must be protected with the same intensity we apply to other critical infrastructure. This calls for new approaches to governance, investment, and cooperation. Health leaders need to understand security concepts, while security professionals must develop a deep understanding of healthcare operations. Most importantly, we must act now, before the next crisis tests our readiness. The question is not whether our healthcare systems will face attacks—it is whether we will be prepared when they occur.
Pascal Lardier, Principal, éditohealth and Content Lead, Radical Health Festival
