Forescout Research Labs published PQC in Healthcare: From Data Risk to Migration Readiness, drawn from more than 2.5 million devices across more than 50 healthcare delivery organizations. Six percent of connected medical devices run SSH implementations that support post-quantum key exchange. IT devices sit at 50 percent, IoT at 28 percent and operational technology at 16 percent. Connected medical devices are about 5 percent of the assets on a hospital network, roughly 2,400 per organization in the sample.
TLS looks worse. Post-quantum capable TLS appears on 8 percent of IT devices, 5.6 percent of connected medical and IoT devices, and 0.8 percent of operational technology. Forescout also queried Shodan for the fingerprints of 50 medical information systems and found more than 5,500 exposed instances, including EMR, PACS, laboratory management and medication dispensing systems. Of those, 31 percent support TLS 1.3, the only TLS version that carries standardized post-quantum algorithms. Another 15 percent still answer on TLSv1 or TLSv1.1.
NIST standardized ML-KEM for key exchange in August 2024 and set out the migration in NIST IR 8547. A device that cannot negotiate TLS 1.3 today will not negotiate a post-quantum key exchange later. For anything still in design, that is a protocol and library decision, not a field patch.