The Same AI That Saves Lives in Hospitals Is Becoming a Weapon in Hackers' Hands

Hospitals worldwide are investing heavily in artificial intelligence to improve diagnostics, treatment, and administrative efficiency. Yet the very same technology that helps doctors is increasingly falling into the hands of cybercriminals—and even state-backed actors—who are using it to attack the very medical institutions it is meant to protect, according to MedCity News AI.

A technological paradox at the heart of healthcare systems

Karen Habercoss, Chief Information Security and Privacy Officer at University of Chicago Medicine, explained how her institution has had to rethink its entire security strategy to address this dual nature of AI. According to MedCity News AI, the hospital is building a governance framework designed to manage the risks associated with AI use—both as a tool for care and as a potential attack vector.

AI tools capable of rapidly analyzing vast volumes of medical data, identifying patterns in patient behavior, or automating administrative processes can, in parallel, be used by attackers to uncover vulnerabilities in hospital IT systems. The speed and sophistication of attacks have grown considerably, the source notes, precisely because cybercriminals now have access to the same categories of advanced technology.

Governance as the key to managing risk

To counter this emerging threat, the team led by Habercoss has focused on building internal control and oversight mechanisms for how AI is deployed across the system. This approach involves ongoing risk assessments, clear rules governing data use, and continuous monitoring of the behavior of algorithms used in clinical operations.

The situation described by the University of Chicago Medicine representative reflects a broader trend across the global healthcare sector, where medical institutions face the dual pressure of innovating through AI while also needing to protect their critical infrastructure. According to MedCity News AI, the challenge lies in striking a balance between the benefits AI brings to patients and the security risks that come with rapidly adopting these technologies.

Ultimately, the case illustrates a dilemma that is becoming increasingly common in medicine: as artificial intelligence becomes an integral part of patient care, it is also turning into a strategic target for those seeking to exploit vulnerabilities in digital health systems.