A new SecurityScorecard report says healthcare workers lack basic security awareness and points to a heightened risk of attacks through social engineering, according to an article on the Healthcare Informatics website.
The report calls employees "low-hanging fruit" for social engineering attacks.
“While a hospital’s IT department may be up to date and proficient at security standards such as DNS health and endpoint security, employees such as medical personnel, administrative professionals, among others, within a healthcare organization may not necessarily prioritize information security."
The low Social Engineering scores among a multitude of healthcare organizations show that security awareness and employee training are likely not sufficient and this poses a real risk to those organizations, the report said.
What To Know Now About OSHA's Updated Hazcom Rule
HealthSource of Ohio and UC Health Partner for New Medical Office Building
NorthShore Health Centers Investigates Data Security Incident 
Healthcare Ransomware Attacks Reach Record High in Q3 2026
Bon Secours Mercy Health Acquires Fauquier Health