Security Assessment Tool for Healthcare Industry




Get your free security rating
  • The Healthcare industry saw an increase in total breaches, mostly in the form of Crimeware, which includes ransomware attacks. Lost and stolen assets were also a concerning pattern—one that’s often hard to confirm as a breach, due to the difficulty of determining whether the data was accessed or not.

  • Total incidents


    The number of security incidents (Nov 2018 to Oct 2019) analyzed in this sector in the 2020 DBIR.

  • Top three patterns

    Miscellaneous Errors 

    Web Applications 

    Everything Else 

    The top trends that emerged from this sector’s data (Nov 2018 to Oct 2019) in the 2020 DBIR.

  • Threat actors 


    51 percent

    48% Internal 

    48 percent

    2% Partner 

    2 percent

    1% Multiple 

    1 percent

  • Actor motives 

    88% Financial 

    88 percent

    4% Fun 

    4 percent

    3% Convenience 


  • Data compromised 

    77% Personal 

    77 percent

    67% Medical 

    67 percent

    18% Other 

    18 percent

    18% Credentials 

    18 percent


  • External attacks are on the rise

    Insider misuse breaches dropped this year, as did breaches involving multiple actors—which occurs when external and internal actors team up to steal data and commit financial fraud. And while healthcare is the sector with the highest amount of internal actor breaches, external actor breaches were slightly more common.

  • Accidental vulnerability, intentional attacks

    Within this sector, misdelivery was the most common mistake. This usually occurs when someone sends an email with sensitive data to the wrong recipients or when a mass paper mailer is sent to the wrong addresses. Web applications were the second most common target due to the growth of patient portals and other online tools, which are rich troves of personal data.

  • Be prepared to react fast

    Cybercriminals can compromise a system and capture data within seconds, so it’s ideal to have a strategy to identify threats as they happen. It’s also important to monitor slower-moving threats, like an insider sharing small amounts of data each week with an accomplice.

  • See the latest trends in cybersecurity.


    Explore the results of the 2020 Data Breach Investigations Report (DBIR) and see what patterns emerged across the thousands of security incidents, from companies both big and small.


    See an overview of all trends

Read specific insights about your industry

  • 2020 dbir cover
  • Understanding the threats can help manage risk effectively

    The threats are real, the attackers motivated. But something stands between them and your organizations data: you and your security teams, with the insight, perspective, and tools to take action. You'll find that all right here.

    Download the report