Health care claims comprised 17% of claims in 2017, but represented 28% of total breach costs, or $65 million out of a total of $229 million, says Gladwyne, Pennsylvania-based NetDiligence, in a report issued Thursday.
The cyber risk management and information security provider also said in its Spotlight Healthcare report that breaches that exposed protected health information were substantially smaller than those that exposed personally identifiable information, at 386,000 records vs. 5.2 million records on average.
The total average breach cost for protected health information was also correspondingly lower, at $475,000 vs. $1.85 million for personally identifiable information.
Among other survey findings, the average notification costs for the sector were 11 times higher than the combined average of all other sectors, at $1 million vs. $92,000, according to the report.
The report is based on a study of 103 healthcare-related claims.
The report was co-sponsored by Austin, Texas-based AllClear ID Inc., a breach response services firm, and by Chicago-based RSM US L.L.P., an audit, tax and consulting services…
