Skip to main content
New Advanced Threat Defense now includes AI-powered URL analysis Learn more → →
Foundational 2 min read

Healthcare Organizations Still Reluctant to Protect Themselves from Phishing Attacks

Brad Slavin
Brad Slavin General Manager
Updated April 17, 2026

Quick Answer

What's the old saying? _Fool me once, shame on you. Fool me twice, shame on me._ Apparently the shame is on the healthcare industry.

Phish Protection blog post image

What’s the old saying? Fool me once, shame on you. Fool me twice, shame on me. Apparently the shame is on the healthcare industry.

Despite numerous successful phishing attacks on healthcare organizations affecting almost 40 million people, the industry is still not sufficiently motivated to protect itself. From Security Boulevard, “to date in 2019 there have been 326 Hacking/IT Incidents affecting some 39,050,355 individuals. Of these incidents, 208 of them have been via email phishing attacks.”

Phishing protection

This is confirmed in an article on Data Breach Today. “Phishing attacks are the primary vector in many of the largest health data breaches being reported to the Department of Health and Human Services these days.” How bad is it? According to Business Insider, “Last year healthcare had more cybersecurity breaches than any other industry - and it will likely intensify.”

That these breaches took place is not in dispute. But what is perplexing is the industry’s response to them. So, what has been the industry’s response? From the same Security Boulevard article, “Privacy and security are health firms’ third-highest priority.” Third? What has to happen for it to move up to number one?

It can’t be the cost, because the cost of HIPAA violations from a data breach are enormous while the cost of prevention is on the order of pennies per employee per month. Whatever the motivation, something has got to change. And that change is Phish Protection.

Phish Protection is a cloud-based email security service with real-time link click protection.

Cloud-based means it requires no hardware, no software and no maintenance. More importantly to healthcare providers, it doesn’t require any additional IT staff.

Phish protection can be set up in 10 minutes to protect every employee in the company, and on every one of their devices. In works with any email provider and comes with

  • display name spoofing,
  • domain name spoofing and
  • malicious attachment blocking.
Protection from phishing

In other words, it stops phishing attacks.

The only possible answer as to why a healthcare organization would not invest 10 minutes and pennies a month per employee to avoid a cyber-attack is they just don’t know about viable solutions. Well now they do.

If you’re at a healthcare organization, or any organization, that doesn’t have cloud-based email security with real-time link click protection, you have no more excuses. Head on over to PhishProtection.com and try it risk-free for 30 days. Do it.

Topics

Brad Slavin
Brad Slavin

General Manager

Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base.

LinkedIn Profile →

Protect your inbox from phishing attacks

Real-time email security with 60-day free trial. No credit card required.