Vision Upright MRI faced a $5,000 fine plus two years of federal monitoring after a server breach exposed over 21,000 individuals' medical imaging records.

Only half of small healthcare practices have phishing or spoofing protection enabled.

The average small healthcare employee has access to more than 5,500 sensitive files.

One-third of small healthcare practices have no clear policies or procedures in place.

98% of small healthcare organisations falsely believe they are HIPAA compliant.

In 2025, healthcare breaches took an average of 224 days to detect and another 84 days to contain—making it over 10 months total.

83% of small healthcare practices believe patient consent removes the need for encryption.

More than 80% of small healthcare practices expressed confidence in their current HIPAA compliance posture.

Agape Health paid $25,000 for emailing protected health information unencrypted.

Nearly 99% of small healthcare organisations have not implemented secure email transfer protocols.

Phishing attacks now account for over 70% of healthcare data breaches as of 2024.

20% of healthcare practices do not utilise any form of email archiving or audit trail.

70% of vulnerabilities detected in healthcare systems were categorised as Medium and High severity issues.

In Great Britain, 77,000+ internet-connected healthcare devices and systems are exposed, endangering patient data.

In Ireland, 81,000+ internet-connected healthcare devices and systems are exposed, endangering patient data.

Examples of data being leaked through exposed internet-connected healthcare devices and systems include brain scans and X-rays, stored alongside protected health information and personally identifiable information of the patient

In Great Britain, 77,000+ internet-connected healthcare devices and systems are exposed, endangering patient data.

Over 1.2 million internet-connected healthcare devices and systems are exposed, endangering patient data.

Outdated or unpatched software leaves critical healthcare devices vulnerable to exploitation.

In Brazil, 82,000+ internet-connected healthcare devices and systems are exposed, endangering patient data.