Protecting Radiology Data and Devices Against Cybersecurity Threats: A Joint White Paper of the ACR and Society for Imaging Informatics in Medicine

Po-Hao Chen, Benoit Desjardins, Brett Strassner, Reza Forghani, Robert Bodak, Judy Gichoya, James Whitfill, Eric C Ehman, Christoph Wald
J Am Coll Radiol. 2025 Aug 6:S1546-1440(25)00409-0. doi: 10.1016/j.jacr.2025.07.014. Online ahead of print.
Abstract
Modern radiology relies entirely on digital imaging systems. Health care records draw cybercriminals' attention. On-site and cloud-based informatics systems, including artificial intelligence, can boost efficiency but also create weak points. Medical imaging systems must safeguard patient identities, control access, secure devices, and coordinate with patients, payers, and billing partners. Endorsed by the ACR and the Society for Imaging Informatics in Medicine, this white paper outlines steps to fortify the medical imaging pipeline methodically, train caregivers on the frontline, and develop incident response and recovery strategies for data breaches and disabling ransomware attacks. Additionally, building a culture of safety in imaging involves conducting routine simulations and actively engaging leadership. Taken together, these multidisciplinary interventions can minimize the clinical impact and operational implications of cybersecurity events, thereby maintaining patient trust in an increasingly interconnected imaging workflow.