Hawley, Hassan, Kelly Reintroduce Bipartisan Bill to Strengthen Rural Hospital Cybersecurity

For information about Senator Hawley’s new RECA law to compensate Missourians,click here.
Wednesday, June 25, 2025
Today, U.S. Senators Josh Hawley (R-Mo.), Maggie Hassan (D-N.H.), and Mark Kelly (D-Ariz.)reintroducedtheRural Hospital Cybersecurity Enhancement Act, which directs the Department of Health and Human Services (HHS) to develop a comprehensive strategy to address the growing need for skilled cybersecurity professionals in rural hospitals. The strategy aims to improve cybersecurity preparedness and create a robust workforce to protect vulnerable critical infrastructure—rural hospitals—from cyber threats. This legislation unanimously passed out of a Senate committee last Congress.“Nearly half of the hospitals in my state are rural. I grew up in a town of 4,000 people—I have lived this firsthand,”said Senator Hawley.“Congress must take action to shore up the ability of small-town hospitals to protect working Americans’ health records from debilitating cyberattacks.”
“Cyberattacks on hospitals can put at risk people’s medical information, and also sometimes shut the hospital down as it recovers, putting lifesaving care at risk,”said Senator Hassan.“This bipartisan legislation is an important step toward ensuring that rural hospitals have the resources, tools, and training that they need to keep patients safe and protect hospitals from attacks from cybercriminals.”
“Rural hospitals are on the frontlines of care for so many Arizonans, but too often they’re underfunded and overexposed to cyber threats that can jeopardize patient safety. We saw this firsthand in Yuma, where a ransomware attack disrupted operations and put hundreds of thousands of patients at risk,”said Senator Kelly.“We are giving rural hospitals the tools and workforce they need to strengthen their security and keep delivering care, especially as they navigate new digital reporting requirements.”Unlike larger urban hospitals, rural hospitals often have little to no full-time cybersecurity personnel and are particularly exposed to cyberattacks. Vulnerabilities in rural hospitals’ cybersecurity defenses can also be used as entry points to disrupt larger healthcare systems, potentially compromising the sensitive medical and personal data of hundreds of thousands of American patients at once.TheRural Hospital Cybersecurity Enhancement Actwould require HHS to:
Read the bill texthere.

"*" indicates required fields
381 Russell Senate Office BuildingWashington, D.C. 20510Office: 202-224-6154Fax: 202-228-0526
1123 Wilkes Blvd, Suite 220Columbia, MO 65201Office: 573-554-1919Fax: 573-256-1805
400 E. 9th Street, Suite 9350Kansas City, MO 64106Office: 816-960-4694Fax:816-472-6812
3236 E. Ridgeview StreetSpringfield, MO 65804Office: 417-869-4433
530 Maryville Centre DriveSuite 460St. Louis, MO 63141Office: 314-354-7060Fax: 1 314-436-8534
555 Independence Street, #1600Cape Girardeau, MO 63703Office: 573-334-5995Fax: 573-334-5947