1. Q3 2025: Digital Health Funding Up, Signals Mixed
Rock Health’s latest Q3 2025 Market Overview: Signals Out of Sync shows that digital health funding is holding steady.
Roughly $3.5 billion was invested in 107 deals last quarter, bringing the year-to-date total to nearly $10 billion. On paper, that’s solid. Under the surface, however, investors are pulling back on mid-stage rounds and allocating more money to later-stage or undisclosed deals. That means fewer bets on new entrants and more attention on proven operators.
The report also notes uneven signals: high valuations in some niches, slowing M&A activity, and tighter diligence on profitability. Capital is available, but it’s cautious capital.
What it means: Digital health isn’t cooling off — it’s maturing. Companies will need to show sustainable growth, not just user metrics or AI branding. For health systems, vendor reliability will matter more than ever as startups face pressure to consolidate or fold.
2. Louisiana Health Systems Link Up Under MyChart Central
Epic announced that Louisiana health systems have gone live with MyChart Central, creating a single access point for patients across multiple hospitals and providers.
This is a practical win for interoperability. Patients can now log in once and view their information from multiple organizations — including visits, prescriptions, and test results — without needing to juggle various portals.
It’s also a complex technical lift. Behind that single sign-on sits shared governance, consistent identity management, and data alignment across systems that historically operated in silos.
Why it matters: This isn’t a flashy app rollout — it’s a model for how to make patient access work statewide. However, it also raises a fundamental question for CIOs: can we scale a shared data infrastructure while still maintaining local control, privacy, and uptime? Louisiana’s experiment will test that balance.
3. H-ISAC: Cyber Threats Keep Escalating
The latest H-ISAC “Hacking Healthcare” report highlights what most IT leaders already suspect: the threat landscape is worsening, not improving.
The report flags three major trends:
Ransomware is more targeted, aiming for disruption instead of just data theft.
IoMT devices (connected medical equipment) remain a weak spot — they are difficult to patch and vulnerable to exploitation.
Nation-state and criminal groups are both active in probing healthcare networks, often through third-party software or supply chain links.
Healthcare has become a soft target because it runs on connected systems but can’t afford downtime. Every new integration or device adds potential exposure.
Takeaway: Security teams need to shift from compliance-driven checklists to continuous threat monitoring and zero-trust frameworks. The cost of being reactive continues to rise.
CIO Perspective: Keep Building, but Tighten the Perimeter
From a CIO seat, this week’s stories hit a common theme: integration without discipline creates risk.
Capital is available, but selective. Interoperability is achievable, but operationally demanding. Connectivity delivers value, but expands the attack surface.
Healthcare’s digital evolution isn’t slowing down, but the tolerance for fragile systems is. The goal now is not just to innovate faster — it’s to build things that can withstand pressure.