Assessment of Employee Susceptibility to Phishing Attacks at US Health Care Institutions.

ABSTRACT:

Importance

Cybersecurity is an increasingly important threat to health care delivery, and email phishing is a major attack vector against hospital employees.

Objective

To describe the practice of phishing simulation and the extent to which health care employees are vulnerable to phishing simulations.

Design, setting, and participants

Retrospective, multicenter quality improvement study of a convenience sample of 6 geographically dispersed US health care institutions that ran phishing simulations from August 1, 2011, through April 10, 2018. The specific institutions are anonymized herein for security and privacy concerns.

Exposures

Simulated phishing emails received by employees at US health care institutions.

Main outcomes and measures

Date of phishing c

SUBMITTER: Gordon WJ 

PROVIDER: S-EPMC6484661 | biostudies-literature | 2019 Mar

REPOSITORIES: biostudies-literature