107 email-related HIPAA breaches were reported to the Department of Health and Human Services in just the first half of 2025.

In one enforcement case, a clinic was fined $25,000 for a single message that contained protected health information (PHI) and was sent to the wrong person without encryption