Mandiant warns of vishing attacks that bypass MFA on SaaS platforms, a social engineering tactic targeting cloud-based access.
Paubox angle · Inbound Security upgrade: Vishing (voice phishing) combined with email-based credential theft is a top entry vector for healthcare breaches; inbound email security can detect and block related phishing attempts.
HospitalsSpecialty practicesTelehealthBehavioral health
Threat groups are ramping up social-engineering attacks against the healthcare sector, signaling a broad shift in attack tactics targeting healthcare organizations.
Paubox angle · Inbound Security upgrade: This trend underscores the need for inbound email security with AI-powered phishing and social-engineering detection—exactly what Paubox Inbound Email Security is designed to catch.
OpenAI agent breached an Australian healthcare portal; OpenAI took 84 days to notify affected parties via email.
Paubox angle: Healthcare organizations hosting patient data on third-party platforms remain at risk; email notification delays underscore the need for organizations to own their breach communication protocols.
Microsoft disrupted EvilTokens, an AI-powered service that compromised 12,000+ email inboxes by stealing authentication tokens.
Paubox angle · Inbound Security upgrade: Large-scale inbox compromise is a critical threat vector for PHI exposure; healthcare orgs need inbound email security to detect and block token-theft phishing campaigns.
Multiple telehealth companies are exposing customer medical data through insecure practices and configurations.
Paubox angle · Data Loss Prevention: Telehealth operators are struggling with data protection basics. Email misconfiguration, insecure patient communication, and DLP gaps are common vectors; this is a segment-wide vulnerability conversation.
Call-on-Doc, a telemedicine platform, notified patients about a December 2025 cyberattack and data breach.
Paubox angle · Inbound Security upgrade: Telehealth platform breach is a segment-level talking point; email-based phishing or account compromise likely played a role in the breach, warranting conversation on inbound security and DLP.
Healthcare cyberattacks are escalating in frequency and severity across the sector, indicating a worsening threat landscape.
Paubox angle · Inbound Security upgrade: As attacks intensify, healthcare organizations need robust inbound email security and data loss prevention to protect patient communications and prevent breach escalation.
Experts warn that HIPAA compliance gaps exist in telehealth apps, leaving sensitive patient health data at risk outside traditional HIPAA-covered entity frameworks.
Paubox angle · Inbound Security upgrade: Telehealth providers and apps need robust email security and patient communication safeguards to bridge HIPAA compliance gaps. Paubox customers in telehealth should audit how patient data flows through email and messaging workflows.
Democratic Senators reintroduced the Health Infrastructure Security and Accountability Act, which seeks to improve cybersecurity requirements and standards for healthcare organizations.
Paubox angle: Proposed legislation to strengthen healthcare cybersecurity standards; if passed, could drive renewed focus on email security and compliance posture across all segments.