What healthcare gets wrong about HIPAA and email security

107 email-related HIPAA breaches were reported to the Department of Health and Human Services in just the first half of 2025.

The current pace of healthcare breaches in 2025 suggests the year is set to exceed 180 email breaches, which was the total reported last year.

In one enforcement case, a clinic was fined $25,000 for a single message that contained protected health information (PHI) and was sent to the wrong person without encryption