Healthcare data security faces rising threats from mobile apps and shadow IT

Healthcare organizations face increasing cybersecurity risks regarding sensitive patient data, including medical records, prescriptions, and diagnostic results. The U.S. Department of Health and Human Services’ Office for Civil Rights recorded over 700 large healthcare data breaches in 2025, impacting approximately 62 million individuals.

Security vulnerabilities exist across mobile applications and digital meeting platforms used by research teams and healthcare professionals. Mobile threats include intercepted communications, credential theft, and API exploitation. To mitigate these, developers are encouraged to implement encryption for data both in transit and at rest, utilize strong authentication, and follow the principle of least privilege for access control.

In research settings, the use of ‘shadow IT’—unauthorized software or hardware used without IT oversight—poses significant compliance risks. To maintain HIPAA compliance, organizations must vet all meeting software and ensure that IT, legal, and security teams approve the tools used for webinars, advisory boards, and professional meetings.