--- title: To Protect Valuable Health Data, Address the Human Factor description: Data breaches at Target and Neiman Marcus last year served as a wake-up call for retailers and customers alike to shore up their data protection. But health care organizations have been slower to follow suit. Earlier this year the FBI warned the industry that it’s particularly vulnerable to cybersecurity threats compared with other sectors. canonical_url: https://www.acronis.com/en/blog/posts/protect-valuable-health-data-address-human-factor/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # To Protect Valuable Health Data, Address the Human Factor Data breaches at Target and Neiman Marcus last year served as a wake-up call for retailers and customers alike to shore up their data protection. But health care organizations have been slower to follow suit. Earlier this year the FBI warned the industry that it’s particularly vulnerable to cybersecurity threats compared with other sectors. [Learn More](https://www.acronis.com/en/products/cyber-protect/) [![Image 2: Acronis Editorial Team](https://staticfiles.acronis.com/images/content/d85707ae91461544212d39836dc32b42.png)](https://www.acronis.com/en/blog/authors/acronis/ "Acronis Editorial Team") [Acronis Editorial Team](https://www.acronis.com/en/blog/authors/acronis/) 3 min read Last updated 20 November 2022 Data breaches at Target and Neiman Marcus last year served as a wake-up call for retailers and customers alike to [shore up their data protection](http://subzeroblog.acronis.com/posts/theft-protection-one-fifth-stolen-devices-contain-important-data). But health care organizations have been slower to follow suit. Earlier this year the FBI warned the industry that it’s particularly vulnerable to cybersecurity threats compared with other sectors. It’s a costly problem for health service providers. The Ponemon Institute estimates that data breaches cost the industry about $5.6 billion annually. Health care employees’ mission is to deliver quality care, but that priority now involves measures to protect the increasing amount of digital patient information that they generate. Health data’s high price tag When hackers gain access to individuals' credit card information, they resell it on black markets, typically for $1 or $2, according to cybersecurity firm Dell SecureWorks. Health-related data, on the other hand, is far more valuable. Health insurance credentials sell for about $20. When criminals pair health information with other identity data, they can fetch $1,000 or more for the package, according to Dell. The information is more valuable for several reasons. First, breaches can go unnoticed for long periods of time. Credit card information expires almost immediately. Financial institutions cancel cards at the slightest suspicion of theft and reissue new ones. It can take weeks or months for a patient to learn that his or her medical information was compromised. In the meantime, crooks can use the information to create fake identities, or illegally obtain prescriptions and medical services, according to Dell. These situations inflict permanent damage. “Your Social Security number and personal health record don't change,” Rick Kam, founder and president of fraud prevention firm ID Experts, tells CNBC. “They have a long shelf life." Addressing the human factor Health care organizations list employee negligence as the biggest threat to security, according to a report from Ponemon Institute and ID Experts. Most data breaches are caused by sloppy practices like lost laptops that contain unencrypted patient information. “The people in the health care industry are good people who sometimes do stupid things, and that is the source of a lot of the problems," Larry Ponemon, chairman and founder of the Ponemon Institute, tells CNBC. "They're trying to get their work done, they feel under pressure, they're in the business of caring for patients, and they don't want to waste time to do more security or take that extra step to protect privacy." While technology helps health care organizations secure mobile devices and protect sensitive data that is stored in the cloud, addressing insider risks requires education, the report concludes: “Training and awareness programs should be conducted at every level of the organization to reduce the negligent employee risk.” [Image via Can Stock] [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) ## Written by ![Image 3: Acronis Editorial Team](https://staticfiles.acronis.com/images/content/d85707ae91461544212d39836dc32b42.png) Acronis Editorial Team Acronis is a global cyber protection company that provides natively integrated cybersecurity, data protection, and endpoint management for managed service providers (MSPs), small and medium businesses (SMBs), and enterprise IT departments. [Previous post](https://www.acronis.com/en/blog/posts/behind-design-how-one-art-director-protects-her-work/) [Behind the Design: How One Art Director Protects Her Work](https://www.acronis.com/en/blog/posts/behind-design-how-one-art-director-protects-her-work/) [Next post](https://www.acronis.com/en/blog/posts/when-choosing-data-protection-technology-remember-flexibility-matters/) [When Choosing a Data Protection Technology, Remember: Flexibility Matters](https://www.acronis.com/en/blog/posts/when-choosing-data-protection-technology-remember-flexibility-matters/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 4: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 5: Introducing New Acronis CEO: Prakash Panjwani](https://staticfiles.acronis.com/images/blog-card/30cb571f6f1aaa131733e5727a4a250c.png) [Introducing New Acronis CEO: Prakash Panjwani](https://www.acronis.com/en/blog/posts/introducing-new-acronis-ceo-prakash-panjwani/) We are pleased to announce the appointment of our new Chief Executive Officer, Prakash Panjwani. A veteran cybersecurity CEO, Panjwani previously served as CEO of WatchGuard Technologies and SafeNet. **October 15, 2026**2 min read ![Image 6: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read