Cyber security attacks on healthcare facilities are on the rise, and the increasing use of technology in day-to-day life, subsequently in the healthcare sector, has only provided more opportunities for hackers to gain and misuse patient healthcare information for personal benefits. The use of Electronic Health Records (EHR) and health information exchange opens new avenues for patient data to be accessed, used, and disclosed by cyber criminals. With the increase in cyber-attacks on the healthcare system, it’s time for healthcare organizations to work towards building a strong cyber defense system. As discussed further in this paper, we will make an attempt to enlighten current cyber-attack threats on the healthcare system, the current scenario of security in the healthcare system, and some recommendations to improve the existing security system. Cyber security threats pose a major risk to efforts to integrate and improve patient care through the use of EHRs and Health Information Exchange (HIE). The potential security risks have been recognized by relevant authorities, including the US government. There have been steps to rectify the problem of security in EHRs. However, despite addressing the areas of patient privacy and electronic storage of patient data, they have not yet made sufficient effort to address the evolving nature of cyber threats and the potential hazards to patient safety and data availability. The pace of technological advancement in the healthcare system has left the security system in the dust, and healthcare systems are unable to cope with the highly sophisticated and well-resourced cyber-attack organizations. Cyber-attacks are becoming increasingly detrimental to patient healthcare, not just in privacy issues, data availability, and data integrity, but also in the potential to harm patients. For example, a patient who has had his medical records altered by a cyber-attack may receive incorrect treatment or prescriptions, having a potentially harmful effect on his health. Current common cyber security threats in healthcare include ransomware, malware, and internal data breaches by malicious intent or human error. A case in point is the 2019 attack on a clinical research organization in India. The attack was planned and executed by hacking the email account of a company executive and sending an email with a malicious attachment disguised as a quotation for construction equipment. An employee of the organization opened the said email and downloaded the compromised file, releasing NetWire malware into the company network. Subsequently, attackers were able to access the database server containing sensitive patient health information. This incident demonstrates the sophisticated nature of cyber-attacks and the potentially damaging consequences to patient healthcare.