-

New Paubox Report Reveals 60% of Healthcare Orgs Admit Email Security Failure

SAN FRANCISCO--(BUSINESS WIRE)--A new Paubox report uncovers significant email security vulnerabilities in healthcare. This report reveals that 60% of healthcare organizations surveyed experienced email-related security incidents last year that exposed sensitive patient data. Despite this, most attacks go unreported. Only 5% of known phishing attacks and 4% of known HIPAA email violations are reported to security teams.

Only 5% of known phishing attacks and 4% of known HIPAA email violations are reported to security teams.

Share

Why this matters: Email remains healthcare’s most vulnerable cyberattack entry point, and IT leaders don’t have a handle on it. Andrea Palm, Deputy Secretary of Health and Human Services, emphasizes: “Cyber attacks directly compromise patient safety, making robust email security essential.”

Report highlights:

  • 60% of healthcare IT leaders reported email security breaches or security incidents last year.
  • Only 5% of known phishing attacks are reported to security teams.
  • Healthcare IT teams aren’t just dealing with spam or hackers—they’re dealing with infrastructure that undermines their mission.
  • IT leaders underestimate the costs of a HIPAA violation by a factor of four.

You might think that the gap between incidents and reporting points to a critical training or culture issue. However, 90% of healthcare organizations conduct regular employee training on email security best practices.

Hoala Greevy, CEO of Paubox, states: “Healthcare doesn’t need more patchwork fixes—it needs a mindset shift. Patients expect secure, convenient communication, and it’s on us to meet that standard. With AI, automation, and built-in encryption, we can proactively defend patient data before threats ever hit the inbox. That’s exactly what we built ExecProtect+ to do—eliminate risk at the source, not after the damage is done.”

Download the full report here: https://hubs.la/Q03hcR7X0

For media inquiries, expert commentary, or interview requests, please contact Dawn Halpin at Paubox at press@paubox.com or 415-795-7396.

About Paubox

Paubox offers HIPAA compliant communication solutions that empower healthcare organizations of any size to simply and securely communicate. Our suite of solutions includes HIPAA compliant encrypted email, inbound email security, HIPAA compliant email marketing, and HIPAA compliant email API for transactional communications. Our customers love our HITRUST certified solutions and we have industry-topping G2 ratings (4.9/5 stars). Learn more at paubox.com

Contacts

Media Contact:
Dawn Halpin
press@paubox.com

Paubox


Release Summary
A new Paubox report reveals that 60% of healthcare organizations surveyed experienced email-related security incidents last year.
Release Versions

Contacts

Media Contact:
Dawn Halpin
press@paubox.com

Social Media Profiles
More News From Paubox

Two in Five Healthcare Organizations Are Building with AI Without a Developer, Paubox Finds

SAN FRANCISCO--(BUSINESS WIRE)--Paubox commissioned a survey of 151 healthcare leaders in July 2026. Respondents were screened to organizations that transmit protected health information (PHI) electronically. All of them already use AI coding assistants to build or modify software. Every data point is scoped to healthcare organizations already using these tools rather than to healthcare organizations generally. The headline finding concerns people rather than technology. IT staff are building w...

Paubox Opens HIPAA Compliant Forms to AI Agents

SAN FRANCISCO--(BUSINESS WIRE)--Paubox has made its HIPAA compliant forms callable by AI agents. An agent can pull a form's questions, collect a patient's answers in conversation, and submit the completed response into Paubox. The record lands under the same business associate agreement (BAA) that covers the rest of the platform.The connection runs over the Model Context Protocol (MCP), an open standard for giving AI assistants access to outside systems. Paubox hosts a server at mcp.paubox.com e...

Paubox Is G2's Highest-Rated Email Encryption and HIPAA Compliant Messaging Software for Fall 2026

SAN FRANCISCO--(BUSINESS WIRE)--Paubox holds the highest customer satisfaction score on G2 in email encryption, at 99 out of 100, and in HIPAA compliant messaging, at 100 out of 100. In G2's Fall 2026 Reports, published this month, Paubox ranked first in 49 of the 127 reports and earned 120 badges across nine software categories. G2 builds its quarterly reports from verified user reviews rather than analyst opinion, and scores products on customer satisfaction and market presence. Paubox holds...
Back to Newsroom