Report: Attacks 'Cascade' From IT, OT to Patient Care

Trellix Says Email, Identify Failures Are Among Top Vectors in Health Compromises Marianne Kolbasuk McGee (HealthInfoSec) • January 27, 2026

Of the millions of threats detected in healthcare IT environments last year, email phishing, identity failures and device vulnerabilities were among the dominant vectors for non-clinical IT compromises - often "cascading" into patient care workflows and causing nearly $2 million a day in losses, said a new report from security firm Trellix.

See Also: Ransomware’s Real Damage in 2025 Wasn't the Ransom

Of 54.7 million threats detected by Trellix last year across its healthcare customers worldwide, 75% originated at U.S.-based organizations, with email incidents - including phishing - accounting for at least 85% of the detections, Trellix said.

The Milpitas, California-based security ...