Healthcare Has the Most to Lose from Email Spoofing. Only 11% of US Healthcare Domains Are Actually Protected.

Mon, 01 Jun 2026 08:00:00 +0000

A new report from Paubox makes the connection between weak email authentication and real-world healthcare breaches impossible to ignore: of 170 email-related breaches at healthcare organizations analyzed across all of 2025, 74% involved domains with DMARC set to monitoring-only mode or no DMARC record at all.

That is not a coincidence. It is a causal chain. And the broader sector data confirms it: the United States healthcare industry sits at just 11% DMARC enforcement in 2026, a figure that looks even more alarming alongside Q1 2026’s count of 120 ransomware attacks on hospitals, clinics, and other healthcare providers, plus 81 additional attacks on healthcare-adjacent businesses like billing processors and pharmaceutical manufacturers.

Healthcare on Daily DMARC News

Healthcare Has the Most to Lose from Email Spoofing. Only 11% of US Healthcare Domains Are Actually Protected.