diff --git a/asv_bench/benchmarks/io/csv.py b/asv_bench/benchmarks/io/csv.py
index 9ac83db4f85b9..4e7229e2ffef7 100644
--- a/asv_bench/benchmarks/io/csv.py
+++ b/asv_bench/benchmarks/io/csv.py
@@ -2,7 +2,6 @@
     BytesIO,
     StringIO,
 )
-import random
 import string
 
 import numpy as np
@@ -19,6 +18,7 @@
 )
 
 from ..pandas_vb_common import BaseIO
+import secrets
 
 
 class ToCSV(BaseIO):
@@ -364,7 +364,7 @@ class ReadCSVFloatPrecision(StringIORewind):
 
     def setup(self, sep, decimal, float_precision):
         floats = [
-            "".join([random.choice(string.digits) for _ in range(28)])
+            "".join([secrets.choice(string.digits) for _ in range(28)])
             for _ in range(15)
         ]
         rows = sep.join([f"0{decimal}{{}}"] * 3) + "\n"
diff --git a/pandas/plotting/_matplotlib/misc.py b/pandas/plotting/_matplotlib/misc.py
index 1f9212587e05e..c2476c1409149 100644
--- a/pandas/plotting/_matplotlib/misc.py
+++ b/pandas/plotting/_matplotlib/misc.py
@@ -1,6 +1,4 @@
 from __future__ import annotations
-
-import random
 from typing import TYPE_CHECKING
 
 from matplotlib import patches
@@ -17,6 +15,7 @@
     maybe_adjust_figure,
     set_ticks_props,
 )
+import secrets
 
 if TYPE_CHECKING:
     from collections.abc import Hashable
@@ -300,7 +299,7 @@ def bootstrap_plot(
     # TODO: is the failure mentioned below still relevant?
     # random.sample(ndarray, int) fails on python 3.3, sigh
     data = list(series.values)
-    samplings = [random.sample(data, size) for _ in range(samples)]
+    samplings = [secrets.SystemRandom().sample(data, size) for _ in range(samples)]
 
     means = np.array([np.mean(sampling) for sampling in samplings])
     medians = np.array([np.median(sampling) for sampling in samplings])