Houchin Introduces Bipartisan Rural Hospital Cybersecurity Enhancement Act

WASHINGTON, D.C. — Congresswoman Erin Houchin (R-IN-09) and Congresswoman Kim Schrier, M.D. (D-WA-08) recently introduced the bipartisan Rural Hospital Cybersecurity Enhancement Act, alongside cosponsors Representatives Jefferson Shreve (R-IN), Glenn "GT" Thompson (R-PA), Jill Tokuda (D-HI), and Jennifer McClellan (D-VA). Companion legislation was introduced in the Senate by Senators Josh Hawley (R-MO), Maggie Hassan (D-NH), and Mark Kelly (D-AZ). The legislation strengthens cybersecurity at rural hospitals by directing the Department of Health and Human Services (HHS) to develop a comprehensive rural hospital cybersecurity workforce strategy, expand cybersecurity training resources, and improve preparedness against growing cyber threats.  

 

"Rural hospitals are often operating with limited staff and resources, yet they're expected to defend against increasingly sophisticated cyberattacks," said Rep. Houchin. "When a rural hospital is forced offline, patient care is put at risk. This bipartisan bill is a practical step toward giving rural providers the workforce, training, and tools they need to strengthen their cybersecurity and continue serving their communities." 

 

“As a doctor and a patient, I know we must protect hospitals from cyberattacks," said Rep. Schrier, M.D. “Rural hospitals in particular often lack the funding and workforce necessary to prevent cyberattacks and some in Washington have already been impacted. This bill will give rural hospitals the tools they need to keep patients safe, protect personal data, and secure medical systems."   

 

"Rural hospitals in Indiana's Sixth District are often the only option for Hoosier families who need care close to home,” said Rep. Shreve. “These hospitals don’t have the resources to hire a cybersecurity team, but they still need to keep their patients’ private information secure. This bill gives them the training and tools they need to do that. I'm glad to join Rep. Houchin on this important legislation." 

 

"In our complex world, it is imperative that we safeguard sensitive personal information and medical records from cybercriminals," Rep. Thompson said. "The Rural Hospital Cybersecurity Enhancement Act aims to protect patient information by helping develop, promote, and expand the rural hospital cybersecurity workforce, particularly through education and training programs tailored to the needs of rural hospitals, such as those in Pennsylvania." 

 

"For rural hospitals, a cyberattack isn't just a disruption to technology, it can become a disruption to care,” said Rep. Tokuda. “This legislation helps ensure rural providers can continue delivering lifesaving care by having the resources, training, and workforce support they need to protect patient data, respond to threats, and continue serving their communities." 

 

“In our rapidly changing digital age, cybersecurity threats continue to grow. Rural hospitals and health clinics often lack the resources and personnel to defend against these threats,” said Rep. McClellan. “The Rural Hospital Cybersecurity Enhancement Act develops a comprehensive workforce training program to protect our rural communities from attacks that could exploit vulnerabilities in our health care system and undermine access to care. I am pleased to work on a bipartisan basis with Congresswoman Houchin to bolster our security measures to help maintain a strong care network.”  

 

“For many years, TRIMEDX has worked with, and provided medical device service for, small town and rural hospitals throughout the country.  Already challenged by increasing cost pressures, we have seen first- hand how vulnerable rural hospitals are to cybersecurity attacks and we support any efforts for the development of strategies to address cyber challenges,” said Kristi McDermott, TRIMEDX Chief Operating Officer. “Accordingly, TRIMEDX applauds Rep. Houchin and Rep. Schrier for introducing this strong bipartisan bill which seeks to address growing cybersecurity challenges, to include workforce development strategies, in rural hospitals throughout the country.” 

 

The Rural Hospital Cybersecurity Enhancement Act requires HHS to: 

 

Cyberattacks against hospitals have become more frequent and more sophisticated, placing patient care, medical records, and critical healthcare infrastructure at risk. Rural hospitals are particularly vulnerable because they often lack the resources to recruit and retain dedicated cybersecurity professionals. 

 

The legislation is endorsed by the American Hospital Association, Blue Cross Blue Shield Association, National Rural Health Association, American Academy of Family Physicians, TRIMEDX, and the Alliance for Quality Medical Device Servicing. 

 

The Senate companion legislation has twice advanced out of the Senate Committee on Health, Education, Labor, and Pensions.