In one enforcement case, a clinic was fined $25,000 for a single message that contained protected health information (PHI) and was sent to the wrong person without encryption

62% of security professionals are concerned about employees directly involved in the handling of sensitive data such as PII, PHI, or PCI.

Only 16% of healthcare organizations have trained most of their staff (75-100%) who have access to PHI on AI usage in email.

The average cost of a healthcare data breach has reached $9.8 million. This average cost is nearly twice as high as the cross-industry average of $4.45 million, according to industry reports.

Over 259 million Americans — roughly 81% of the population — had their protected health information (PHI) compromised in 2024.

Medical identity theft victims face $13,500 in average costs and 200+ hours of resolution.

70% of patients say they would consider switching providers after a data breach.