VendorsPaubox

Paubox

Cybersecurity reports and statistics published by Paubox

8 categories5 reports

Recent Statistics & Reports

107 email-related HIPAA breaches were reported to the Department of Health and Human Services in just the first half of 2025.

The current pace of healthcare breaches in 2025 suggests the year is set to exceed 180 email breaches, which was the total reported last year.

In one enforcement case, a clinic was fined $25,000 for a single message that contained protected health information (PHI) and was sent to the wrong person without encryption

75% of healthcare organizations say AI has added confusion, not clarity, to email compliance.

94% of healthcare organizations have begun updating security policies to address generative AI threats in email.

69% of healthcare IT leaders feel pressured to adopt AI faster than they can secure it.

25% of healthcare organizations have not formally approved any staff use of AI in email.

58% of healthcare organizations have not signed a BAA for an AI email tool so far.

Only 16% of healthcare organizations have trained most of their staff (75-100%) who have access to PHI on AI usage in email.

62% of healthcare IT and compliance leaders have observed staff experimenting with ChatGPT or similar tools even though they’re unsanctioned.

21% of respondents from healthcare organizations believe a Business Associate Agreement (BAA) isn’t required for an AI email assistant.

95% of healthcare organizations report staff are already using AI tools.

83% of healthcare IT and compliance leaders have raised concerns about AI security.

16% of healthcare IT and compliance leaders admit compliance was never consulted before AI email tools were enabled.

41% of healthcare IT and compliance leaders feel confident they could detect improper AI use before a HIPAA violation occurs.

Only 42% of healthcare organizations have signed a Business Associate Agreement (BAA) covering any AI assistant used in email.

The largest single email breach, affecting United Seating and Mobility, exposed over half a million records.

Incidents involving Mimecast email customers accounted for 8% in healthcare.

More than 1.6 million patient records were compromised across all analysed email-related healthcare incidents that occurred in the first half of 2025.

Incidents involving Barracuda email customers accounted for 5% in healthcare.

Showing first 20 results