A new SecurityScorecard report says healthcare workers lack basic security awareness and points to a heightened risk of attacks through social engineering, according to an article on the Healthcare Informatics website.
The report calls employees "low-hanging fruit" for social engineering attacks.
“While a hospital’s IT department may be up to date and proficient at security standards such as DNS health and endpoint security, employees such as medical personnel, administrative professionals, among others, within a healthcare organization may not necessarily prioritize information security."
The low Social Engineering scores among a multitude of healthcare organizations show that security awareness and employee training are likely not sufficient and this poses a real risk to those organizations, the report said.
5 Reasons Engineering is the Edge in Healthcare Master Planning
Building an AI-Ready Healthcare Facility 
Family Medical Associates of Raleigh Reports April 2026 Data Breach
Every Detail Matters: A Patient's Story of Healing, Hope and Healthcare Facilities
Geisinger Wyoming Valley Medical Center Tops Off New 11-Story Tower