AI Is Supercharging Hacking — Hospitals and Banks Aren't Ready

AI Is Supercharging Hacking

New AI models are making hacking more powerful. According to reporting by Christopher Mims in The Wall Street Journal, AI is reshaping the economics of cyberattacks, giving attackers tools that were once the preserve of well-funded teams. Big Tech is responding by using the same technology to shore up its cyber defenses, deploying AI to detect and block intrusions at a scale human analysts cannot match.

The result is an arms race. Attackers gain speed and reach; defenders gain automated detection and response. But the benefits are not evenly distributed. The companies best positioned to exploit defensive AI are the largest technology firms, which have the data, talent, and compute to train and run these systems.

That imbalance sets up the question the rest of this article explores: if AI is making hacking more powerful and Big Tech is using it to shore up its own cyber defenses, what happens to everyone else?

What About Everyone Else?

Big Tech firms can throw billions at security research, red teams, and AI-driven defences. But the AI hacking boom will not politely confine itself to companies with those budgets. The organisations most exposed are often the ones least able to respond.

Consider what sits outside the tech bubble: regional utilities, municipal governments, school districts, small manufacturers, logistics firms, and independent retailers. Many run ageing systems, have no dedicated security staff, and depend on software they cannot easily patch or replace.

These organisations also hold exactly what attackers want — customer records, payment data, operational controls, and credentials that can be resold or used to pivot into larger supply chains. When AI lowers the cost of finding and exploiting flaws, the economics of attacking a mid-sized target change sharply.

The uncomfortable question is not whether these groups will be targeted, but whether they will even know it is happening. For many, the answer today is no.

Local Hospitals and Banks Aren't Ready

The organisations most exposed to AI-supercharged hacking are often the ones with the least capacity to respond. Local hospitals and banks frequently run on tight budgets, legacy systems, and small security teams that are already stretched thin.

These institutions hold exactly what attackers want most: sensitive patient records, financial data, and payment systems. That makes them prime targets, yet many lack the advanced defences that larger corporations can afford.

When AI tools let attackers probe for weaknesses faster and at greater scale, the gap between well-funded targets and local services widens. A small IT team cannot match the speed of automated attacks.

The consequences reach beyond the organisations themselves. A hospital forced offline can delay care. A bank breach can wipe out savings and erode trust in the local economy.

Without serious investment in security and training, these community institutions remain the softest targets in an increasingly automated threat landscape.

Why This Matters Now

Hayden Field's piece, dated Sep 28, 2026, frames the gap between Big Tech's defenses and everyone else's readiness as the central tension of the moment. The timing is not incidental. AI is supercharging hacking, and the organizations best equipped to absorb that shock are the same ones that built the technology in the first place.

That asymmetry is what makes the story urgent. As Field reports, local hospitals and banks are not ready for what is coming, and the distance between their preparedness and Big Tech's is widening rather than closing. The companies at the frontier can staff security teams, fund research, and patch quickly. Smaller institutions cannot.

Read the full article for the details behind that divide:

AI Is Supercharging Hacking — and Big Tech's Defenses Won't Save Everyone Else

Field's framing matters because it resists the easy narrative that AI security is a problem Big Tech will solve on everyone's behalf. The piece suggests the opposite: the defenses being built at the top may not transfer downward, and the organizations least able to respond are the ones holding the most sensitive data.