-

New Paubox Report Reveals 60% of Healthcare Orgs Admit Email Security Failure

SAN FRANCISCO--(BUSINESS WIRE)--A new Paubox report uncovers significant email security vulnerabilities in healthcare. This report reveals that 60% of healthcare organizations surveyed experienced email-related security incidents last year that exposed sensitive patient data. Despite this, most attacks go unreported. Only 5% of known phishing attacks and 4% of known HIPAA email violations are reported to security teams.

Only 5% of known phishing attacks and 4% of known HIPAA email violations are reported to security teams.

Share

Why this matters: Email remains healthcare’s most vulnerable cyberattack entry point, and IT leaders don’t have a handle on it. Andrea Palm, Deputy Secretary of Health and Human Services, emphasizes: “Cyber attacks directly compromise patient safety, making robust email security essential.”

Report highlights:

  • 60% of healthcare IT leaders reported email security breaches or security incidents last year.
  • Only 5% of known phishing attacks are reported to security teams.
  • Healthcare IT teams aren’t just dealing with spam or hackers—they’re dealing with infrastructure that undermines their mission.
  • IT leaders underestimate the costs of a HIPAA violation by a factor of four.

You might think that the gap between incidents and reporting points to a critical training or culture issue. However, 90% of healthcare organizations conduct regular employee training on email security best practices.

Hoala Greevy, CEO of Paubox, states: “Healthcare doesn’t need more patchwork fixes—it needs a mindset shift. Patients expect secure, convenient communication, and it’s on us to meet that standard. With AI, automation, and built-in encryption, we can proactively defend patient data before threats ever hit the inbox. That’s exactly what we built ExecProtect+ to do—eliminate risk at the source, not after the damage is done.”

Download the full report here: https://hubs.la/Q03hcR7X0

For media inquiries, expert commentary, or interview requests, please contact Dawn Halpin at Paubox at press@paubox.com or 415-795-7396.

About Paubox

Paubox offers HIPAA compliant communication solutions that empower healthcare organizations of any size to simply and securely communicate. Our suite of solutions includes HIPAA compliant encrypted email, inbound email security, HIPAA compliant email marketing, and HIPAA compliant email API for transactional communications. Our customers love our HITRUST certified solutions and we have industry-topping G2 ratings (4.9/5 stars). Learn more at paubox.com

Contacts

Media Contact:
Dawn Halpin
press@paubox.com

Paubox


Release Summary
A new Paubox report reveals that 60% of healthcare organizations surveyed experienced email-related security incidents last year.
Release Versions

Contacts

Media Contact:
Dawn Halpin
press@paubox.com

Social Media Profiles
More News From Paubox

Paubox Is G2's Highest-Rated Email Encryption and HIPAA Compliant Messaging Software for Fall 2026

SAN FRANCISCO--(BUSINESS WIRE)--Paubox holds the highest customer satisfaction score on G2 in email encryption, at 99 out of 100, and in HIPAA compliant messaging, at 100 out of 100. In G2's Fall 2026 Reports, published this month, Paubox ranked first in 49 of the 127 reports and earned 120 badges across nine software categories. G2 builds its quarterly reports from verified user reviews rather than analyst opinion, and scores products on customer satisfaction and market presence. Paubox holds...

Amazon Says SES Requires TLS 1.2. Paubox Testing Shows It Doesn't.

SAN FRANCISCO--(BUSINESS WIRE)--Emails sent through Amazon Simple Email Service (SES) can be delivered in plaintext, readable by anyone in transit, and the sender never knows. New testing from Paubox found Amazon SES could deliver protected health information (PHI) in email even when encryption fails. The findings come from How Amazon SES puts PHI at risk, published today by Paubox, a leader in HIPAA compliant email security. Paubox engineers ran 14 controlled tests against Amazon SES in Q2 202...

Healthcare IT Leaders Gave Themselves a Perfect Breach Detection Score. 58% of Them Got Breached Anyway, Paubox Finds

SAN FRANCISCO--(BUSINESS WIRE)--Healthcare IT leaders are giving themselves top marks on email breach detection while their organizations keep getting breached, according to new research from Paubox. In a survey of 170 U.S. healthcare IT leaders, 100% rated their real-time breach detection as Excellent or Good. In the same sample, 58% admitted their organization had been breached through email in the past two years. The findings come from the Healthcare Email Security Maturity Index 2026, publi...
Back to Newsroom