IT leaders estimate only 5% of known phishing attacks are reported by healthcare employees to their security teams.

There was a 264% increased surge of ransomware attacks on healthcare organizations.

43.3% of healthcare email breaches involved Microsoft 365.

Barracuda, Mimecast, and Proofpoint account for 26.7% of healthcare email breaches in 2024.

1.1% of healthcare organizations analyzed had a 'Low Risk' email security posture.

64% of organizations fell victim to external attacks that exploited employees through email.

Email-related incidents increased by 57%.

42.72% of IT decision-makers at financial services firms reported that email security is currently fully or partially managed by an MSP or MSSP.

75% of healthcare organizations say AI has added confusion, not clarity, to email compliance.

16% of healthcare IT and compliance leaders admit compliance was never consulted before AI email tools were enabled.

41% of healthcare IT and compliance leaders feel confident they could detect improper AI use before a HIPAA violation occurs.

Only 42% of healthcare organizations have signed a Business Associate Agreement (BAA) covering any AI assistant used in email.

25% of healthcare organizations have not formally approved any staff use of AI in email.

21% of respondents from healthcare organizations believe a Business Associate Agreement (BAA) isn’t required for an AI email assistant.

83% of healthcare IT and compliance leaders have raised concerns about AI security.

62% of healthcare IT and compliance leaders have observed staff experimenting with ChatGPT or similar tools even though they’re unsanctioned.

58% of healthcare organizations have not signed a BAA for an AI email tool so far.

95% of healthcare organizations report staff are already using AI tools.

69% of healthcare IT leaders feel pressured to adopt AI faster than they can secure it.

Only 16% of healthcare organizations have trained most of their staff (75-100%) who have access to PHI on AI usage in email.