How DMARC helps boost healthcare’s herd immunity to ransomware

With its sudden onset, devastating effects, and long recovery time, ransomware can be best likened to a disease. And no industry knows this better than healthcare. In 2021, there were 1203 attacks on US healthcare institutions alone, and for 11 consecutive years, healthcare has been hit with the heftiest costs for data breaches, largely resulting from attacks like these.

But what makes ransomware such a serious affliction for healthcare providers is that the data breaches and disruptions resulting from attacks have a very human cost. In research carried out by Ponemon Institute, 22% of respondents agreed that ransomware has an impact on increased mortality rates, while PBS uncovered a shocking parallel between ransomware and an uptick in fatal heart attacks.

It’ll only become a more pressing priority for healthcare providers to strengthen their defenses against this affliction as we move into 2022, and DMARC plays a key role in this. 

How does ransomware work?

Ransomware is a type of malware – most often disguised in a phishing email – that once deployed, blocks you from accessing your data through encryption. Cybercriminals then demand a ransom for access to this, otherwise, your data might be lost or leaked. 

What makes companies susceptible to ransomware?

Sensitive data, legacy systems, a widespread attack surface, and digitization all contribute to a company’s vulnerability to ransomware attacks. But not having the essential security protocols in place to secure vital information and infrastructure makes any business vulnerable, and these are often overlooked.

As our CEO Rahul Powar explains, “Primarily what makes companies susceptible to ransomware attacks is a lack of the basic infrastructure and protocols which are designed specifically to mitigate these risks. Businesses should be asking themselves if they have protocols like DMARC in place to stop exact impersonation attacks, if their inbound protection like SEGs or Advanced Threat Protection products are in order, and whether sufficient awareness training has been provided. Ransomware attackers will take any opportunity to hit an organization with a lot of sensitive data, and the more robust, standardized solutions businesses can put in place to plug the gaps, the better protected they are.” 

Why is healthcare such a lucrative target for cybercriminals?

There are a number of reasons why ransomware is so rife in healthcare:

  • Healthcare organizations store mass amounts of very sensitive data, and cybercriminals know this. 
  • It’s a sector which is rapidly digitizing, meaning there are vulnerabilities if the right measures aren’t in place.
  • There’s a widespread attack surface with many staff who’ve often not received adequate security awareness training in many areas.
  • Large supply chains and alot of third-party outsourcing, meaning there are more endpoints and opportunities for attack.
  • Legacy systems and outdated processes contribute too.

“Healthcare organizations are lagging behind other verticals in cybersecurity defenses because they do not invest enough on cybersecurity protection and are known to be vulnerable to attacks. Some of the basic protections against cyberattacks are not deployed and hence they are easy targets for hackers. Attacks on healthcare have a higher impact from the perspective of lives lost or physical harm as data or critical systems are compromised, as well as the sensitivity of the data being exposed.”

Issam Bandak, Red Sift Director of Sales Engineering

How can protocols like DMARC help create herd immunity in the healthcare sector?

DMARC stands for Domain-based Message Authentication, Reporting, and Conformance. It’s a globally standardized email authentication protocol that protects domains from exact domain impersonation or ‘email spoofing’. Essentially, when implemented properly at a policy of p=reject, it ringfences your domain ( and blocks hackers from being able to use it to impersonate your business and send phishing emails to your patients, employees, and supply chain.

Given that 90% of cyber attacks start with an email, and 90% of malware is delivered via spam email, DMARC is an essential – and surprisingly cost-effective – way for providers to secure this particularly vulnerable vector. Better still, the more organizations that adopt it, the fewer domains are on offer for hackers to impersonate for phishing attacks, BEC, ransomware, and vendor fraud. That’s where the concept of herd immunity comes in; if every organization implements DMARC, then ransomware will be driven down, and healthcare organizations, their data, suppliers, and most importantly patients, will be better protected.

Get your free DMARC health check today

At Red Sift, we’re passionate about democratizing the technology essential to cybersecurity – in short making it easy and accessible for everyone. So take the first step to DMARC protection today and get your free DMARC, SPF, and DKIM health check using our investigate tool.

Check email DMARC setup


Sabrina Evans

11 Feb. 2022



Recent Posts


Your guide to the SubdoMailing campaign

Billy McDiarmid

A significant number of well-known organizations have been attacked as part of what’s being called the SubdoMailing (Subdo) campaign that has been going on since at least 2022, research by Guardio Labs has revealed.   The scale of execution of this attack is staggering, and the impact is hugely damaging, but the goal is simple…

Read more

A confident deployment guide for TLS and PKI

Ivan Ristic

Our journey to better network transport security has been quite the ride, filled with ups and downs. Back in the ’90s, when SSL and the Netscape browser were just taking off, things were pretty hard. We were dealing with weak encryption, export restrictions on cryptography, and computers that couldn’t keep up. But over the…

Read more

Red Sift OnDMARC: The best Agari alternative for DMARC

Francesca Runger-Field

Looking for an alternative to Agari DMARC Protection that helps you safely and efficiently stop unauthorized use of your email-sending domains? You’re in the right place.  Here is your definitive comparison guide for Agari and Red Sift OnDMARC – one of the most popular Agari alternatives on the market.  Red Sift OnDMARC overview Red…

Read more

Red Sift OnDMARC: The best Valimail alternative for DMARC

Francesca Runger-Field

Looking for an alternative to Valimail that helps you safely and efficiently stop unauthorized use of your email-sending domains? You’re in the right place.  Here is your definitive comparison guide for Valimail and Red Sift OnDMARC – one of the most popular Valimai alternatives on the market.  Red Sift OnDMARC overview Red Sift OnDMARC…

Read more