Major healthcare providers leave email systems open to phishing risk
The report analysed the adoption of DMARC, an email authentication protocol, across 4,100 prominent hospitals and clinics in both the United States and Europe, including the 100 highest-ranked healthcare organisations worldwide. The research revealed that while the proportion of top providers using DMARC increased marginally from 62% in 2024 to 65% in 2025, a substantial 35% still operate without DMARC protection altogether.
Of those that have put DMARC in place, the study found that nearly half are not fully utilising its protective capabilities. Just 18% of the top 100 global providers have enforced DMARC to actively block suspicious emails, whilst 48% are using the weakest setting-known as 'p=none'-which merely monitors email activity and does not prevent fraudulent messages from reaching inboxes.
Ongoing cyber threats
The findings come against a backdrop of significant cyberattacks targeting the healthcare sector in recent years. This includes a notable breach at the UK's National Health Service (NHS) in 2024, where almost 400GB of patient data was illicitly obtained, as well as disruptions experienced by Yale New Haven Health in Connecticut. The report highlights that the sensitive nature of healthcare data and the sector's vital societal role make it an attractive target for cybercriminals.
Healthcare organisations, which are heavily reliant on digital communication and critical infrastructure, are especially susceptible to cyber threats such as phishing attacks. Such incidents not only threaten financial loss but can also impact patient safety and healthcare delivery.
DMARC functions by verifying whether incoming emails originate from approved sources, allowing organisations to block potentially fraudulent emails before they reach users. Full enforcement requires setting DMARC to 'p=reject', which rejects unverified emails outright rather than simply monitoring them.
Regional differences in protection
EasyDMARC's analysis of 2,000 of the largest European healthcare providers indicated that only 48% have DMARC implemented, and of those, over half have the setting at 'p=none'. This approach fails to block harmful messages, leaving significant vulnerabilities. In the United States, DMARC adoption reaches 55%, but nearly 40% of these providers also operate with the weakest monitoring-only policy.
The research indicates that, despite an increase in awareness of email security, many healthcare providers remain exposed and have not moved towards policies that fully block phishing attempts. With over 90% of all cyberattacks said to originate via email phishing, the lack of comprehensive DMARC enforcement is highlighted as a substantial and ongoing risk.
Industry-wide changes in policy from major email providers, including Google, Yahoo, and Microsoft, have made it mandatory for bulk email senders to enforce DMARC, reflecting the protocol's place as an industry standard. Microsoft's requirements came into force in early May.
Call for stricter enforcement Gerasim Hovhannisyan, CEO of EasyDMARC said: "The healthcare sector is under constant pressure to protect patients, keep services running, and manage sensitive data, but too many organisations are still stopping short of full protection. DMARC only works when it's configured properly and enforced, and that means setting it to 'p=reject'. Anything less leaves inboxes open to impersonation and phishing attacks. For healthcare providers, the risk isn't just financial; it's operational and deeply human. Every unprotected email domain is another opportunity for attackers to disrupt care and put lives at risk."
Data from the report also breaks down DMARC deployment within each region. In Europe, 955 of the 2,000 largest healthcare domains have valid DMARC records, but only 241 are set to 'p=reject' and 229 to 'p=quarantine', with the remainder on monitoring only. In the United States, 1,103 of 2,000 have DMARC records, 170 set to 'p=reject', and 501 to 'p=quarantine'. For the top 100 global providers, 65 domains have DMARC, with just 12 set to enforcement and 22 to quarantine.
Healthcare providers are being encouraged by security experts to review their DMARC configurations and move toward full enforcement settings to better safeguard sensitive information and maintain the continuity of essential services in the face of increasingly sophisticated cyber threats.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
NZ Herald
a day ago
- NZ Herald
All the benefits of having a G&T over a glass of wine
This will be welcome news to many. So what are the benefits of swapping your regular pint or glass of wine for a G&T? The health benefits of a G&T 1. Fewer calories than beer and wine One shot of gin will provide you with around 50 calories, compared with about 130 calories in a medium glass of red or white wine or the 200-300 calories in a pint of beer. A 200ml serving of light tonic to mix your drink will come in at around 30 calories, keeping a health-conscious G&T under 100 calories to a glass. The average British man drinks 17.6 units of alcohol every week, according to NHS data, the equivalent of eight to nine pints of lager (with beer still being the drink consumed most frequently by men in the UK). Drinking the same number of single-measure G&Ts each week – though it is not recommended that any adult consumes more than 14 units of alcohol in this timeframe – would mean cutting around 900 'empty' calories from your diet and losing a stone within a year. Meanwhile, women who switch from the average nine units or four medium glasses of wine per week to single G&Ts would drink 120 fewer calories. This might not sound like much, but tweaks like this can make all the difference in limiting your party-season weight gain. At this time of year when the units we consume will likely outpace our average for the year, 'a gin and tonic is definitely a better option to manage your weight,' Trotman says. 2. Less sugar and carbs than other contenders A single shot of gin contains zero grams of sugar, as well as no carbohydrates. This is one of the reasons that gin is often the drink of those on a ketogenic diet, as it is less likely to knock your body out of its fat-burning state (though all alcohol will make it harder for your liver to process food). Aside from leading to weight gain, drinking any beverage that has a high carbohydrate content – like lager, with 10-15g of carbs to a pint, or cider which has as much as 40g a glass – can cause uncomfortable bloating and an upset stomach. A no-carb drink such as gin 'will have less of an impact on your blood sugar levels too,' Trotman says, another factor that makes it a better option for keeping your waistline static (and making sure that you've still got some energy the morning after). And while vodkas and rums typically come mixed in fizzy, sugary drinks, the sugar in a slimline tonic typically comes in at around 7.6g per 200ml glass, compared with the 21.2g in 200ml of full-fat Coca Cola. Light rather than diet tonic is ideal with your gin as 'diet tonic will be full of artificial sweeteners that can worsen your health in the long term,' Trotman says. 'So if you're having a few, always opt for a light version and a single shot.' 3. A boost from juniper berries and garnishes Gin is made by brewing a neutral-tasting grain with juniper berries and other botanicals such as lemon peel, coriander seeds, cardamom or thyme. Juniper berries contain flavonoids as well as large amounts of vitamin C, which can improve circulation and help ward off colds, and antioxidants which promote skin regeneration. These berries can also speed up your digestive system and soothe inflammation. While the amount of these goodies left over in a single serving of gin is likely 'negligible', Trotman says, gin can also be infused with ingredients that up its health benefits: some kinds on the market have been paired with large volumes of fruit juice for added vitamin C, while some have been specifically blended to provide micronutrients as well as collagen. Others are brewed with extra juniper berries. G&Ts are also easy to make and serve creatively. A quick health tip is just to 'eat the slice of orange that comes with your drink, because every little does help,' Trotman says, or at home 'you could mix in some cranberry juice for antioxidants or add some blueberries for helpful polyphenols'. 4. Easier to drink in moderation The versatility of a gin and tonic is a major reason why Sophie Trotman recommends it to her clients. With a light tonic, 'you can add a lot of ice to make it a long drink that you're able to keep sipping over a longer period,' reducing the total amount of alcohol you drink in the course of an evening. The reduced sugar and artificial sweeteners involved meanwhile will make it easier to stop at just a few, turning down the dial on your cravings and helping you to call it a night earlier. Unlike wine, the leftover bottle of which can call from the fridge on a Monday evening, a G&T takes more effort to make and so it becomes 'easier to have days off,' Trotman says. 'It's also very easy to alternate your G&Ts with glasses of water, which you'll thank yourself for the next day,' Trotman says. For those looking to cut down there are other benefits too. 'It shouldn't be a concern, but if you start on G&Ts and switch to a non-alcoholic version later in the night, there will be no la
1News
02-08-2025
- 1News
District attempts to tackle youth vaping with a smokefree CBD
Gisborne District Council wants the city centre to be vape-free and smoke-free to curb the "epidemic" of young people taking up the habit. Tairāwhiti has the highest smoking rates in the country, and there has been a sharp increase in youth vaping. In 2018, the council adopted its smokefree outdoor areas policy, which is not legally enforceable but encourages residents to refrain from smoking in specific areas. On Thursday at its sustainable Tairāwhiti committee meeting, the council revised its policy to include electronic cigarettes and expand its smoke-free area to include the city centre. Deputy Mayor Josh Wharehinga said the inclusion of vaping "sends the right signal" to the community. ADVERTISEMENT However, some councillors questioned whether it was a matter for the council or a public health issue for the central Government to address. "It's a health problem. I worry we're dipping into things that we shouldn't be," said councillor Debbie Gregory. Councillor Rawinia Parata responded that policies like these only made kids hide their smoking. In contrast, councillor Colin Alder said central government had let them down. As an ex-smoker who battled an addiction for most of his life, Alder said he would love all the money he spent on smoking back "with interest". "The companies that have been peddling this addiction are rubbing their hands together." According to the meeting's report, Tairāwhiti continued to have the highest smoking rates in the country. ADVERTISEMENT However, data showed it was decreasing, with the rate of smoking dropping from 22% to 12% between 2018 and 2023, the report said. Action for Smokefree 2025 surveyed thousands of Year 10 students every year on smoking and vaping behaviour habits. In 2023, the National Public Health Services prepared a report for the Gisborne District Council using Ash NZ data to understand the extent of vaping in the region. At peak, a third of students regularly vaping The percentage of participating Gisborne students who regularly vape soared from 1.6% in 2015 to 36% in 2022 but had decreased to 26.6% in 2023. The number of students who had tried vaping at least once had increased from a quarter in 2015 to just over half (54.7%) in 2023. The Māori rate of regular vaping (37.0%) was significantly higher than the rate for European/other (14.4%), according to the report. ADVERTISEMENT Councillor Nick Tupara agreed it was a government responsibility and a public health issue, particularly for Māori. However, the council could not expect national change if there was no voice locally. "Looking at the data, it is epidemic, and it was during my mother's time and my grandmother's time." Councillor Teddy Thompson said New Zealand was behind the eight ball, noting that in Australia, vape flavours were limited and people could only buy vapes from pharmacies. He and Gregory asked for the cost of updating signage, while councillor Larry Foster wanted to expand the policy area to include the central business district. The policy's designated smoke-free areas are playgrounds, parks, sports grounds, beaches, and outdoor public areas around council buildings and facilities, as well as any events run or funded by the council. Strategic planning manager Charlotte Knight said that as the policy was a position statement rather than an enforceable rule, it did not require consultation. After the majority of councillors voted in favour of Foster's suggestion, Knight said the council would include the CBD, and the area would be the same as the Local Alcohol Policy definition. ADVERTISEMENT A council spokeswoman said the cost to update the policy was minimal. There might be some funding from the Ministry of Health and other stakeholders to help with updating signage, she said. Mayor says community will 'self-police' Mayor Rehette Stoltz recalled how, in 2018, the council questioned how it would enforce its initial smoking policy. "The community self-police. At the end of the day, people slowly stop smoking in places that they used to, and now people just don't." Stoltz said the policy was "more a signal from the council to the community on what we value in our open spaces for our children". "Let's send that message and make it supportive. It is a health issue, there is help available, and not to shame people," she said. ADVERTISEMENT According to the council report, no council in New Zealand had a smoke-free/vape-free bylaw. The Whanganui District Council did adopt a bylaw. However, it revoked it because of enforcement issues and now used a voluntary policy, the report said. The council will update its website by September 1 to communicate the policy changes. LDR is local body journalism co-funded by RNZ and NZ On Air.
NZ Herald
01-08-2025
- NZ Herald
Gisborne targets youth vaping with CBD smoke-free policy
However, some councillors questioned whether it was a matter for the council or a public health issue for the central Government to address. 'It's a health problem. I worry we're dipping into things that we shouldn't be,' said councillor Debbie Gregory. Councillor Rawinia Parata responded that policies like these only made kids hide their smoking. In contrast, councillor Colin Alder said central Government had let them down. As an ex-smoker who battled an addiction for most of his life, Alder said he would love all the money he spent on smoking back 'with interest'. 'The companies that have been peddling this addiction are rubbing their hands together.' According to the meeting's report, Tairāwhiti continued to have the highest smoking rates in the country. However, data showed it was decreasing, with the rate of smoking dropping from 22% to 12% between 2018 and 2023, the report said. Action for Smokefree 2025 (Ash NZ) surveys thousands of Year 10 students every year on smoking and vaping behaviour habits. In 2023, the National Public Health Services prepared a report for the Gisborne District Council using Ash NZ data to understand the extent of vaping in the region. The percentage of participating Gisborne students who regularly vape soared from 1.6% in 2015 to 36% in 2022, but had decreased to 26.6% in 2023. The number of students who had tried vaping at least once had increased from a quarter in 2015 to just over half (54.7%) in 2023. The Māori rate of regular vaping (37.0%) was significantly higher than the rate for European/other (14.4%), according to the report. Councillor Nick Tupara agreed it was a government responsibility and a public health issue, particularly for Māori. However, the council could not expect national change if there was no voice locally. 'Looking at the data, it is epidemic, and it was during my mother's time and my grandmother's time.' Councillor Teddy Thompson said New Zealand was behind the eight ball, noting that in Australia, vape flavours were limited and people could only buy vapes from pharmacies. He and Gregory asked for the cost of updating signage, while councillor Larry Foster wanted to expand the policy area to include the central business district. The policy's designated smoke-free areas are playgrounds, parks, sports grounds, beaches, and outdoor public areas around council buildings and facilities, as well as any events run or funded by the council. Strategic planning manager Charlotte Knight said that as the policy was a position statement rather than an enforceable rule, it did not require consultation. After the majority of councillors voted in favour of Foster's suggestion, Knight said the council would include the CBD, and the area would be the same as the Local Alcohol Policy definition. A council spokeswoman said the cost to update the policy was minimal. There might be some funding from the Ministry of Health and other stakeholders to help with updating signage, she said. Mayor Rehette Stoltz recalled how, in 2018, the council questioned how it would enforce its initial smoking policy. 'The community self-police. At the end of the day, people slowly stop smoking in places that they used to, and now people just don't.' Stoltz said the policy was 'more a signal from the council to the community on what we value in our open spaces for our children'. 'Let's send that message and make it supportive. It is a health issue, there is help available, and not to shame people,' she said. According to the council report, no council in New Zealand had a smoke-free/vape-free bylaw. The Whanganui District Council did adopt a bylaw. However, it revoked it because of enforcement issues and now used a voluntary policy, the report said. The council will update its website by September 1 to communicate the policy changes.
