Only 4% of known HIPAA email violations are reported to healthcare security teams.

60% of healthcare organizations surveyed experienced email-related security incidents last year that exposed sensitive patient data.

The health care sector had the highest average ransom paid of any industry, at $847,875.

Health care continued to be the industry with the most incidents at 36%.

60% of healthcare IT leaders reported email security breaches or security incidents last year.

IT leaders at healthcare organizations underestimate the costs of a HIPAA violation by a factor of four.

90% of healthcare organizations conduct regular employee training on email security best practices

Only 5% of known phishing attacks are reported to healthcare security teams.

Nearly three out of every five assets in healthcare environments have a critical vulnerability finding.

1% of IoMT devices carry KEVs linked to active ransomware campaigns and insecure internet connectivity, impacting 89% of organisations.

8% of imaging systems (X-rays, CT scans, MRI, ultrasound, and more) have KEVs linked to ransomware and insecure internet connectivity, making this the riskiest medical device category and impacting 85% of organisations.

20% of HIS (hospital information systems), which manage clinical patient data, as well as administrative and financial information, have KEVs linked to ransomware and insecure internet connectivity, impacting 58% of organisations

89% of healthcare organisations have the top 1% of riskiest IoMT devices on their networks, which contain known exploitable vulnerabilities (KEVs) linked to active ransomware campaigns and an insecure connection to the internet.

The healthcare sector had the most third-party breaches (78) but a below-average rate of 32.2%.

9% of IoMT devices contain confirmed KEVs in their systems, impacting 99% of organisations.

79% of healthcare-related applications are under attack

There has been a 50% increase in healthcare cybersecurity spending since 2018.

Only 1.1% of analyzed healthcare organizations had a low-risk email security posture.

Solara Medical Supplies' $9.76 million settlement was due to a phishing-related breach affecting 114,000 patient records.

43% of healthcare email breaches were tied to Microsoft 365.