Phishing Attacks a Major Security Concern for Healthcare
Hikvision Offers Insights, Education on Phishing Attacks
A new report by the Journal of the American Medical Association (JAMA), “Assessment of Employee Susceptibility to Phishing Attacks at U.S. Healthcare Facilities,” found that phishing poses a major security concern in healthcare organizations “with employees clicking one in seven simulated emails sent,” according to an article in Security magazine.
From the article: “Under simulation, a large number of employees clicked on phishing emails, consistent with findings across other industries, where click rates can range from 13 percent to 49 percent. The study found that the odds of clicking on a phishing email decreased with greater institutional experience, which they attributed to the benefit of running phishing simulation campaigns for employee education and awareness.”
The click rate is affected by factors such as the complexity of the phishing email, institutional factor such as messaging, and prior employee exposure to phishing simulations.
A report summary on the JAMA website said the study shows that “healthcare institutions conduct phishing simulations to raise awareness and identify employees who may benefit from education and training.”
Hikvision has authored several blogs on the topic, including “Examples of Phishing” part one and part two, and one about spear phishing. These posts help reduce concerns about security by helping employees and partners identify phishing emails to avoid becoming a victim of this type of cyberattack.