Post-quantum-ready SSH runs on 6% of the hospital IoMT devices Forescout analyzed
Forescout found post-quantum-capable SSH on 6% of IoMT and 16% of medical OT devices in a 2.5 million-device study of over 50 healthcare organizations. With long device lifecycles and few upgrade paths, hospitals are left planning around segmentation.
The Watch · Security desk
What happened
- Traditional IT devices in the same analysis reached 50%, well above both medical device categories.
- Many of the affected devices are directly involved in patient care, including infusion pumps, patient monitors, imaging systems and laboratory equipment.
- Forescout found more than 5,500 internet-exposed systems, among them platforms holding electronic medical records and picture archiving systems.
- Only 31% of those exposed systems support TLS 1.3, the only TLS version capable of carrying standardized PQC.
Why it matters
- Who's exposed exposure Medical histories and diagnostic images stay sensitive for decades, so encrypted traffic recorded from exposed systems before migration stays a liability well past a five-year quantum window.
- What it limits constraint For medical gear with limited upgrade paths, post-quantum protection has to come from the network around the device, through segmentation and isolation.
- Who has to decide decision Procurement is where hospitals set a long-lived device's cryptography, so PQC readiness and TLS 1.3 belong in purchase requirements before installation.
Next story · Invest · Oct 7
Europol tells crypto holders to move exposed wallet keys before quantum computers can break themConfirmed8 publishers
Harvest now, decrypt later has two stages. Recording encrypted traffic works today. Reading it requires a quantum computer able to break current encryption, and the Infosecurity Magazine report says such machines are predicted within the next five years [19]. The article does not say who made that forecast. Forescout's researchers single out the internet-exposed systems as particularly vulnerable to this pattern, because an attacker can take the data now and decrypt it later [8].
The device percentages measure SSH. Forescout's report, published October 6 [16], counted which SSH implementations could support a move to PQC [1]. By that count, 94% of IoMT devices and 84% of medical OT devices fall short [17]. Traditional IT does about eight times better than IoMT [18]. Forescout describes the medical gear as long-lived, with limited upgrade paths and slow uptake of modern cryptographic standards [5].
Daniel dos Santos, VP of research at Forescout, said: "Our research shows that the devices least prepared for the transition are often the same devices healthcare organizations depend on most for delivering patient care. Visibility into those assets and the data they handle is essential for building a practical migration strategy." [6]
For anything facing the internet, the TLS number matters more. Roughly 3,800 or more of the exposed systems run TLS older than 1.3 [20]. Each of them needs a protocol upgrade before a post-quantum migration can start [10].
Forescout's guidance expects part of the fleet to stay as it is. Its assessment step sorts systems into upgrade, replacement or compensating controls [12]. The list begins with an inventory of every connected IT, OT, IoT and IoMT asset and what each one communicates with [11], and it calls for segmenting and isolating legacy systems that cannot be upgraded [13]. The 6% figure counts SSH stacks as deployed. Whether a vendor can ship a post-quantum stack to an installed pump is a firmware question, and Forescout's answer is to ask vendors for their PQC roadmaps and migration timelines [15].
I'd order the work by reachability. The internet-exposed systems [7] are the ones an outside attacker can record traffic from without first getting into a hospital network [8]. Isolating them cuts that exposure whether or not the five-year forecast holds [19].
What to watch
- Vendor PQC roadmaps from pump, monitor and imaging makers. They set how much of the IoMT fleet can be fixed in firmware and how much must be isolated or replaced.
- A sourced date for quantum decryption capability. The five-year forecast in the coverage sets the window for segmenting legacy gear.
- Evidence of a group bulk-recording healthcare traffic. That would turn harvest now, decrypt later from a modeled risk into an observed campaign.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence60
- Adoption10
- Hype gap+20
- Incentives
- Not scored
- Confidence58
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Just 6% of Internet of Medical Things (IoMT) devices and 16% of medical operational technology (OT) devices use SSH implementations capable of supporting a transition to post-quantum cryptography.
- [2]
50% of traditional IT devices can support PQC implementation.
- [3]
Forescout analyzed more than 2.5 million devices across more than 50 healthcare delivery organizations.
- [4]
Many of these healthcare systems are directly involved in patient care, such as infusion pumps, patient monitors, imaging systems and laboratory equipment.
- [5]
These devices often have long lifecycles, limited upgrade paths and slower adoption of modern cryptographic standards.
- [6]
"Our research shows that the devices least prepared for the transition are often the same devices healthcare organizations depend on most for delivering patient care. Visibility into those assets and the data they handle is essential for building a practical migration strategy."
- [7]
Researchers identified more than 5,500 internet-exposed systems, including platforms containing electronic medical records (EMRs) and picture archiving and communication systems (PACS).
- [8]
The researchers warned that the internet-exposed systems are particularly vulnerable to harvest now, decrypt later attacks, in which threat actors steal encrypted data today intending to decrypt it once quantum computers are powerful enough.
- [9]
Medical histories, diagnostic images, laboratory results, prescription records and other healthcare data retain their value and sensitivity for decades.
- [10]
Of the exposed systems, just 31% support TLS 1.3, the only TLS version capable of supporting standardized PQC.
- [11]
Forescout recommends inventorying and classifying all connected IT, OT, IoT and IoMT assets, including their communication with other assets.
- [12]
Forescout recommends assessing which assets support PQC today and identifying systems that require upgrades, replacement or compensating controls.
- [13]
Forescout recommends segmenting and isolating legacy systems that cannot be upgraded.
- [14]
Forescout recommends incorporating PQC readiness into governance, procurement and risk management processes, including enforcing TLS 1.3 wherever possible.
- [15]
Forescout recommends engaging vendors to understand their PQC roadmaps and migration timelines.
- [16]
The Forescout report was published on October 6.
- [17]
94% of IoMT devices and 84% of medical OT devices do not use SSH implementations capable of supporting a PQC transition.
- [18]
Traditional IT devices support PQC at about eight times the rate of IoMT devices.
- [19]
Quantum computers are predicted to be capable of breaking existing encryption methods in the next five years; the article states this prediction without naming who made it.
- [20]
Roughly 3,800 or more of the internet-exposed systems do not support TLS 1.3.
Sources
2 independent publishers whose own reporting we read for this story.
- helpnetsecurity.comMedical devices patients rely on most are least prepared for quantum attacks
1 article · October 7, 2026
- infosecurity-magazine.comCritical Medical Devices Unable to Support PQC Transition
1 article · October 6, 2026
Topics and entities
Topics
- Harvest Now, Decrypt Later Threat
- Healthcare Cybersecurity
- Post-Quantum Cryptography
- Internet of Medical Things