ECCC-funded projects to strengthen healthcare cybersecurity across Europe

These projects will actively contribute to the EU action plan on cybersecurity of hospitals and healthcare providers, adopted by the European Commission in January 2025.

As cyber threats targeting the healthcare sector continue to rise, especially ransomware attacks that pose serious operational risks, safeguarding hospitals and healthcare providers has become a critical priority across Europe. 

The projects will focus on enhancing hospitals' and healthcare providers' capacity to identify, monitor, and respond to cyber threats effectively. As vital players in the health sector, these organisations need better protection to safeguard sensitive data and maintain the continuity of care and critical services. 

The initiatives will support these goals through a range of dedicated activities, including technical development (more than 200 tools, services, and methodologies developed), operational assistance (more than 500 healthcare and health institutions involved, with more than 200 pilot installations), staff training (at least 10000 healthcare staff trained), and compliance with major European standards (NIS2, GDPR, and the European Health Data Space).  Pilot deployments are already scheduled in 14 member states with more expected to join later.

The projects’ activities align with the European action plan on the cybersecurity of hospitals and healthcare providers, aim to strengthen collaboration with ENISA and the Commission, leverage practical experience, and gradually involve a broader range of stakeholders. The goal is to support cooperation and effectively translate European strategic priorities into concrete actions for hospitals and healthcare providers across Europe. These projects are:

CyberShield4Health supports the cybersecurity resilience of healthcare organisations across Europe by scaling a proven, community-based approach that combines NIS2 maturity assessments, training, cybersecurity services, and pilot deployments. Bringing together healthcare clusters, providers, and specialised service providers from multiple EU countries, the project supports NIS2 compliance, ransomware preparedness, and incident response capabilities. 

HEALTH-ER aims strengthen the cybersecurity resilience of European hospitals through an AI-powered framework combining advanced cyber protection, preparedness, and training services. At its core, an AI-driven SOC-as-a-Service will help healthcare providers detect, prevent, and respond to cyber threats more effectively.

HOSPITABLEwill enhance the cybersecurity resilience of European hospitals through an AI-powered platform for threat detection, incident response, compliance, and staff training. The project aims to improve preparedness, reduce cyber risks, and strengthen trust in secure digital healthcare across Europe.

MEDICYSS aims to strengthen the cybersecurity resilience of hospitals and healthcare providers by deploying modular cybersecurity solutions that support the transition towards NIS2 compliance. Through pilot deployments in Spain and Portugal, the project focuses on risk assessment, threat monitoring, incident response, staff awareness, and the security of medical devices, helping healthcare organisations improve their cyber maturity and preparedness.

NMCIH- NoMoreCyberincidentsInHealth aims to strengthen the cybersecurity resilience of European hospitals through scalable tools for threat detection, monitoring, incident response, and ransomware protection. Validated in several EU countries, the project supports NIS2 compliance, enhances preparedness, and promotes secure information sharing across the healthcare sector.

REINFORCE aims to strengthen the cybersecurity resilience of European healthcare providers through an AI-driven ecosystem for threat prevention, detection, response, and staff training. Combining an AI-enhanced Security Operations Centre with awareness and testing platforms, the project helps hospitals improve preparedness, comply with EU requirements, and ensure the continuity of critical healthcare services.

ShieldHealthAdria aims to strengthen the cybersecurity resilience of hospitals in Slovenia and Croatia through cybersecurity assessments, pilot deployments, and staff training. The project will support compliance with NIS2 and GDPR, improve hospitals’ capacity to prevent and respond to cyber incidents, and develop a replicable model for adoption across the European healthcare sector. 

Background 

The seven projects are part of the dedicated action under the Digital Europe Programme to reinforcing hospitals and healthcare providers - DIGITAL-ECCC-2025-DEPLOY-CYBER-08-CyberHEALTH.

Digital Europe Programme is implemented by multiannual work programmes and supports investments in the following sectors: High Performance Computing; Cloud, data and Artificial Intelligence; Cybersecurity and Advanced digital skills.

The ECCC implements the ‘Specific Objective 3: Cybersecurity and Trust’ from the DEP Regulation (EU) 2021/694. The Digital Europe Cybersecurity Work Programme for 2025-2027 and its amendments complement the main DEP WP and are approved by the ECCC Governing Board. 

Digital Europe Programme is financed by the  2021-2027 Multiannual Financial Framework of the European Union.