Rural hospitals get free cybersecurity training blueprint, no new federal spending
S. 2169 — Rural Hospital Cybersecurity Enhancement Act · Filed by Josh Hawley (R-MO) · 6 cosponsors · Introduced Jun 25, 2025 · Reported out
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill requires the Secretary of Health and Human Services to develop a comprehensive strategy within one year to address cybersecurity workforce shortages in rural hospitals. The strategy must include partnerships with educational institutions, curriculum development for rural-focused cybersecurity training, and identification of rural hospital cybersecurity challenges. The Secretary must also publish free instructional materials for rural hospital staff and provide annual briefings to Congress on progress, with no new federal funding required.
Why we flagged it
The bill's core mechanism is a planning and coordination mandate—requiring HHS to develop a strategy, consult stakeholders, create training resources, and report progress. It is a public-health infrastructure measure addressing a genuine rural vulnerability (cybersecurity workforce gaps) through education and partnership, not a regulatory change or appropriation.
What the text implies
- The bill's effectiveness depends entirely on HHS follow-through and agency coordination; no enforcement mechanism or funding guarantee exists if agencies deprioritize the strategy.
- Annual briefings create accountability but no mandatory action—Congress receives updates but the bill contains no authority to compel implementation of strategy recommendations.
- Free instructional materials may reduce demand for private cybersecurity training vendors in rural markets, potentially affecting commercial training providers.
- The strategy's success hinges on rural hospitals' capacity to adopt recommendations; resource-constrained rural facilities may lack staff time or infrastructure to implement training even if materials are free.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
Rural hospitals and their communities benefit from improved cybersecurity defenses (protecting patient data and hospital operations) and access to workforce development resources at no additional federal cost. The bill creates accountability through annual congressional briefings and involves broad stakeholder consultation, strengthening transparency and public health resilience.
Who stands to gain
- rural hospitals (access to free training materials and coordinated workforce development)
- community colleges and vocational schools in rural areas (potential partnerships for curriculum deli
Named in the bill
Department of Health and Human Services, Cybersecurity and Infrastructure Security Agency (CISA), Department of Education, Department of Labor, National Cyber Director, rural hospitals, critical access hospitals, sole community hospitals, rural emergency hospitals, community colleges, vocational schools
Where it stands
6 cosponsors: 5 Democrats, 1 Republicans.
- Jun 25, 2025 — Introduced · Congress.gov: “Introduced in Senate”
- Jun 25, 2025 — Referred to Senate Committee on Health, Education, Labor, and Pensions · Congress.gov: “Read twice and referred to the Committee on Health, Education, Labor, and Pensions”
- Jan 15, 2026 — Reported out of committee · Congress.gov: “Committee on Health, Education, Labor, and Pensions. Ordered to be reported with an amendment in the nature…”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
2 lobbying clients named this bill on 2 disclosure filings across 2 quarters, Dec 2025 to Jun 2026. Those filings disclosed $5,137,881 in lobbying spend. A filing names 50 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 41% of bills with at least one filing.
Josh Hawley, the sponsor, reported $68,000 in PAC receipts in the 2026 cycle.
- American Hospital Association — $4,470,000 on 1 filing
- American Academy of Family Physicians — $667,881 on 1 filing
Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (5,647 characters) on Jun 3, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Dec 2025 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 20, 2026 · page rendered 2026-10-20.
“Rural hospitals get free cybersecurity training blueprint, no new federal spending” QuorumCivic. https://share.quorumcivic.app/bill/119/s2169 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.