Paubox Weekly Fully Automated - A HIPAA compliant email security Podcast

In this episode, Alex and Jen examine three critical healthcare security stories: the Interlock ransomware attack on AngMar Management Services exposing 710 gigabytes of hospice data, pharmacy communication compliance challenges uncovered at the NCPA Annual Convention, and a 4.1 million patient record breach caused by a single compromised contractor session. The discussion highlights common root causes including poor configurations, third-party access blind spots, and insufficient monitoring, while offering practical guidance on segmentation, session management, and applying the principle of least privilege.

In this episode, Alex and Jen discuss Paubox's new Security Awareness Training add-on for HIPAA-compliant phishing simulations, examine Astrana Health's phone spoofing cyberattack and its implications for social engineering defenses, and break down Labcorp's $2.3 million settlement stemming from a 2019 vendor breach. The conversation also covers key takeaways from a recent Paubox Table dinner in Atlanta, including emerging concerns around AI governance and vendor risk management in healthcare organizations.

This episode covers Paubox's new inbound email API processing feature, insights from healthcare leaders on responsible AI adoption, and critical security updates including the Cedar County Memorial Hospital ransomware attack, an actively exploited Cisco Secure Email Gateway vulnerability, and Ambry Genetics' $700,000 HIPAA settlement. Key takeaways emphasize the importance of network segmentation, timely patching, and foundational security practices to prevent costly breaches.

In this episode, we discuss Paubox's new DLP Chat and Observe and Report features, Microsoft cloud infrastructure attacks exploiting passkey transitions, the $3.1 million Palomar Health Medical Group breach settlement, dual ransomware gang claims on Interim HealthCare, and the resurgence of fake Windows lock screen phishing tactics. We break down the security implications and actionable takeaways for healthcare organizations looking to strengthen their defenses.

This episode examines three critical developments in healthcare cybersecurity and compliance: widespread MyChart phishing campaigns targeting Medicare patients across 30+ health systems, the $15 million DaVita settlement following the 2025 Interlock ransomware attack, and California's new AB 1979 legislation restricting autonomous AI clinical decision-making. Key takeaways include proactive patient communication strategies, incident response planning, and auditing AI workflows to ensure appropriate human oversight.

In this episode, Alex and Jen discuss recent cybersecurity threats affecting healthcare organizations, including the ShinyHunters breach of oncology company Novocure and the FBI disruption of a China-linked botnet targeting hospitals. They also cover new Paubox Email API features for scheduled sends and the Senate HELP Committee's advancement of legislation to extend HIPAA-style protections to health data held by non-covered entities.

In this episode, we discuss Paubox's recognition in G2's Fall 2026 reports, a surge in MyChart phishing scams targeting patient credentials, and a Chicago cardiology practice breach that went undetected for ten weeks. We also cover the new customizable reply-to feature in Paubox Forms and examine how ransomware groups are now using AI-generated legal risk reports as a pressure tactic against victims.

In this episode, Alex and Jen discuss Paubox's new PDF import feature for HIPAA compliant forms, unified scoped API keys, and the latest IBM data on healthcare breach costs, which remain the highest of any industry at $6.6 million on average. They also cover an emerging credential theft scam targeting professionals on X and share insights from a recent Paubox Table dinner in New York, emphasizing that most security vulnerabilities stem from fixable configuration issues rather than sophisticated attacks.

In this episode, Alex and Jen discuss the latest healthcare cybersecurity threats including a major data extortion claim against NYC Health + Hospitals, sophisticated phishing campaigns using fake font files, and an in-flight Wi-Fi attack targeting travelers. They also cover the $650,000 settlement by Highland Health Systems following a 2023 breach and emphasize that most security incidents stem from preventable gaps rather than sophisticated attacks.

In this episode, we break down recent healthcare data breaches including an 83,000-record phishing incident at Aitkin County Health and a nine-year undetected email forwarding leak at Child Care Resource Center. We also cover the HHS 2026 Unified Agenda timeline, the Health-ISAC warning on ShinyHunters threat actors targeting cloud identity infrastructure, and key takeaways for strengthening your organization's security fundamentals.