---
title: Improving Payment Security
description: Approximately 10 times a week on average in 2024, a U.S. healthcare company experienced a data compromise/ event.
image: https://finmedpartners.com/hubfs/ITRC%20Breach%20Cover%20graphic.png
---

[![FinMed Partners-1](https://finmedpartners.com/hs-fs/hubfs/FinMed%20Partners-1.png?width=200&height=65&name=FinMed%20Partners-1.png "FinMed Partners-1")](https://finmedpartners.com/)

- [About](https://finmedpartners.com/about)
- [Services](https://finmedpartners.com/services)
- [Team](https://finmedpartners.com/team)
- [Insights](https://finmedpartners.com/insights)
- [Blog](https://finmedpartners.com/blog)
- [HFF 2026](https://finmedpartners.com/hff)

[CONTACT US](https://finmedpartners.com/contact-us)

## Search

# Improving Payment Security

![](https://finmedpartners.com/hubfs/ITRC%20Breach%20Cover%20graphic.png)

![ Henri Cattier, Partner](https://finmedpartners.com/hubfs/henri-cattier.jpeg)

[Henri Cattier, Partner](https://finmedpartners.com/blog/author/henri-cattier-partner)

 February 25, 2025

Share : <https://www.linkedin.com/sharing/share-offsite/?https://finmedpartners.com/blog/unbanked-households-decline-to-record-low-0> [mailto:?subject=Check+out+this+blog+post%3A+Improving+Payment+Security&body=I+thought+you+might+enjoy+this+blog+post%3A+https%3A%2F%2Ffinmedpartners.com%2Fblog%2Funbanked-households-decline-to-record-low-0](mailto:?subject=Check+out+this+blog+post%3A+Improving+Payment+Security&body=I+thought+you+might+enjoy+this+blog+post%3A+https%3A%2F%2Ffinmedpartners.com%2Fblog%2Funbanked-households-decline-to-record-low-0)

##### Healthcare has second most data compromises in 2024

Approximately 10 times a week on average in 2024, a U.S. healthcare company experienced a data compromise/ event. (A “data compromise” is the term used to refer to events where personal information is accessible by unauthorized individuals and/ or for unintended purposes. This includes data breaches, data exposures and data leaks.)

This alarming statistic is amongst many insights in the recently published [2024 Data Breach Report](https://www.idtheftcenter.org/publication/2024-data-breach-report/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_zzb5lZeojbsAKEV_GXlIPSJB9pihH0CHgpZz2aQ-V_oYCHyrkjLdlgQcdBeJPILTO6KqAIIEoIIAzuhR_IecT3o81IQYcfd2jQZNimV8V3l1SJPI). This report is released annually by the [Identity Theft Resource Center](https://www.idtheftcenter.org/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_zzb5lZeojbsAKEV_GXlIPSJB9pihH0CHgpZz2aQ-V_oYCHyrkjLdlgQcdBeJPILTO6KqAIIEoIIAzuhR_IecT3o81IQYcfd2jQZNimV8V3l1SJPI) (ITRC), a nationally recognized nonprofit organization established to support victims of identity crime. After years of holding the dubious distinction of being the most frequently breached industry as quantified by unique data compromises, healthcare ceded the top spot in 2024 to financial services (also fairly concerning!)

It's worth pointing out that while it only counted as only one data compromise in 2024, the Change Healthcare breach was responsible for 94% of the 203 million victim notices generated by Supply Chain attacks across all industries in 2024. Based on the 190 million victim notices it sent, Change Healthcare was the third biggest breach in 2024, behind Ticketmaster (560 million), and Advanced Auto Parts (380 million). The next largest healthcare company was Kaiser Health Plan, with 13.4 million notices, making it #10 overall.

![Picture1](https://finmedpartners.com/hs-fs/hubfs/Picture1.png?width=718&height=448&name=Picture1.png)

Source: ITRC 2024 Data Breach Report

##### Healthcare will remain a top target for data compromises

Healthcare and financial services firms are attractive targets for cyberattacks and data breaches because of the valuable data that they store, transmit and use to provide their services. Why healthcare and financial services? To paraphrase Willie Sutton, “Because that’s where the juiciest data is.”

For senior executives at hospitals, health systems, and health plans, cybersecurity threats are a persistent concern. Last year’s mega-breach at Change Healthcare disrupted cash flow and reimbursements for millions of U.S. healthcare providers and pharmacies, nearly crippling hospitals nationwide. Healthcare enterprises are investing millions of dollars in strengthening their defenses against cyberattacks, payment system breaches, and other external data infiltrations.

For Chief Information Security Officers (CISOs) and Chief Technology Officers (CTOs), the ITRC report provides useful data and insights into emerging cybersecurity threats, compliance updates, and technology risk management strategies critical to healthcare organizations.

![ITRC Breach Infographic 2024](https://finmedpartners.com/hs-fs/hubfs/ITRC%20Breach%20Infographic%202024.png?width=676&height=521&name=ITRC%20Breach%20Infographic%202024.png)

One of the most significant vulnerabilities cited in the report is the lack of rigorous vetting of third-party vendors, leaving hospitals and larger enterprises susceptible to indirect breaches. This occurs, for example, when healthcare providers assume that payment gateway and merchant services vendors are fully protecting patient payment data as it travels across multiple channels within the health system. Protecting payment data is no longer just about the co-pay at the front desk, however. Protected Health Information (PHI) now travels on mobile applications and through patient portals. Securing financial transactions across the full range of applications and transit points is essential.

##### The Role of P2PE Solutions

As healthcare organizations look to make their information security systems more robust, they are increasingly looking to implement solutions with PCI-validated Point-to-Point Encryption (P2PE). A PCI P2PE solution is a combination of secure devices, applications, and processes that encrypt payment card data from the point it is used at a point of interaction (POI) device until it reaches a secure point of decryption. The adoption of P2PE solutions dramatically reduces the risk of data breaches and simplifies compliance with [PCI DSS](https://www.pcisecuritystandards.org/document_library/?document=pci_dss&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_zzb5lZeojbsAKEV_GXlIPSJB9pihH0CHgpZz2aQ-V_oYCHyrkjLdlgQcdBeJPILTO6KqAIIEoIIAzuhR_IecT3o81IQYcfd2jQZNimV8V3l1SJPI) (Payment Card Industry Data Security Standard). This, in turn, cuts down on security costs and regulatory burdens that healthcare providers face.

PCI P2PE solutions are validated by a standards body to ensure they meet the rigorous security requirements of the PCI P2PE Standard, and are listed on the PCI Security Standards Council (PCI SSC) [website](https://www.pcisecuritystandards.org/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_zzb5lZeojbsAKEV_GXlIPSJB9pihH0CHgpZz2aQ-V_oYCHyrkjLdlgQcdBeJPILTO6KqAIIEoIIAzuhR_IecT3o81IQYcfd2jQZNimV8V3l1SJPI). There are over 124 listed solutions worldwide, with many specializing in healthcare including [Bluefin](https://www.bluefin.com/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_zzb5lZeojbsAKEV_GXlIPSJB9pihH0CHgpZz2aQ-V_oYCHyrkjLdlgQcdBeJPILTO6KqAIIEoIIAzuhR_IecT3o81IQYcfd2jQZNimV8V3l1SJPI) and [Instamed](https://www.instamed.com/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_zzb5lZeojbsAKEV_GXlIPSJB9pihH0CHgpZz2aQ-V_oYCHyrkjLdlgQcdBeJPILTO6KqAIIEoIIAzuhR_IecT3o81IQYcfd2jQZNimV8V3l1SJPI).

##### The Future of Healthcare Payment Security

Healthcare, like all industries, must remain vigilant and continue investing in appropriate measures to defeat bad actors attempting to penetrate information systems. Healthcare organizations should not assume that a reduced number of data compromises in 2024 equates to reduced risk!

Healthcare organizations must double down on proactive cybersecurity strategies, particularly with regard to financial transactions. By encrypting sensitive payment data at the point of entry and ensuring it never exists in a readable format within a provider’s network, healthcare organizations can significantly reduce their exposure to cyber threats.

In today’s digital landscape, adopting innovative payment security measures is not just an “upgrade”—it is a necessity and matter of survival. Healthcare leaders must take decisive action to protect patient data and financial transactions, ensuring the industry remains resilient in the face of evolving cyber threats.

TAGS [#Payment Infrastructure/ Platform](https://finmedpartners.com/blog/tag/payment-infrastructure-platform) [#Payment Trends](https://finmedpartners.com/blog/tag/payment-trends) [#Information Security](https://finmedpartners.com/blog/tag/information-security)

Share : <https://www.linkedin.com/sharing/share-offsite/?https://finmedpartners.com/blog/unbanked-households-decline-to-record-low-0> [mailto:?subject=Check+out+this+blog+post%3A+Improving+Payment+Security&body=I+thought+you+might+enjoy+this+blog+post%3A+https%3A%2F%2Ffinmedpartners.com%2Fblog%2Funbanked-households-decline-to-record-low-0](mailto:?subject=Check+out+this+blog+post%3A+Improving+Payment+Security&body=I+thought+you+might+enjoy+this+blog+post%3A+https%3A%2F%2Ffinmedpartners.com%2Fblog%2Funbanked-households-decline-to-record-low-0)

## Our Blog

[View All](https://finmedpartners.com/blog)

[![](https://finmedpartners.com/hs-fs/hubfs/Tyler%20Stafford%20cropped.png?width=352&name=Tyler%20Stafford%20cropped.png)](https://finmedpartners.com/blog/ceo-chat-panacea-financial)

### [CEO Chat: Panacea Financial](https://finmedpartners.com/blog/ceo-chat-panacea-financial)

![Tyler Stafford, CEO & Co-Founder](https://finmedpartners.com/hubfs/Tyler%20Stafford%20square.png)

[Tyler Stafford, CEO & Co-Founder](https://finmedpartners.com/blog/author/tyler-stafford-ceo-co-founder)

 We founded Panacea to build a financial platform designed specifically for doctors — from medical school through residency, practice ownership, and beyond.

[![](https://finmedpartners.com/hs-fs/hubfs/Instinct%20Pay.png?width=352&name=Instinct%20Pay.png)](https://finmedpartners.com/blog/providers-show-strong-interest-in-embedded-financial-services)

### [Providers show strong interest in embedded financial services](https://finmedpartners.com/blog/providers-show-strong-interest-in-embedded-financial-services)

![Henri Cattier, Partner](https://finmedpartners.com/hubfs/henri-cattier.jpeg)

[Henri Cattier, Partner](https://finmedpartners.com/blog/author/henri-cattier-partner)

 Healthcare providers are signaling they want payment processing and the broader universe of embedded finance built directly into their practice software.

[![](https://finmedpartners.com/hs-fs/hubfs/Zelis%20blog%20image.png?width=352&name=Zelis%20blog%20image.png)](https://finmedpartners.com/blog/ceo-chat-zelis)

### [CEO Chat: Zelis](https://finmedpartners.com/blog/ceo-chat-zelis)

![Dylan Papa, SVP & GM, Commercial Growth & Partnerships](https://finmedpartners.com/hubfs/Dylan%20Papa%20Headshot%20avatar.jpeg)

[Dylan Papa, SVP & GM, Commercial Growth & Partnerships](https://finmedpartners.com/blog/author/dylan-papa-svp-commercial-growth)

 Zelis was founded to solve a core challenge in healthcare: a fragmented financial experience that is difficult to navigate.

[![](https://finmedpartners.com/hs-fs/hubfs/DML%20Square%202025-1.png?width=352&name=DML%20Square%202025-1.png)](https://finmedpartners.com/blog/ceo-chat-boost-payment-solutions)

### [CEO Chat: Boost Payment Solutions](https://finmedpartners.com/blog/ceo-chat-boost-payment-solutions)

![Dean M. Leavitt, Founder & CEO](https://finmedpartners.com/hubfs/DML%20Square%202025%20square.jpg)

[Dean M. Leavitt, Founder & CEO](https://finmedpartners.com/blog/author/dean-m-leavitt-founder-ceo)

 Boost was founded to address inefficiencies in B2B payments where legacy methods create friction, delay and unnecessary cost.

[![](https://finmedpartners.com/hs-fs/hubfs/Pharmacist%20giving%20credit%20card%20to%20costumer%20at%20pharmacy.jpeg?width=352&name=Pharmacist%20giving%20credit%20card%20to%20costumer%20at%20pharmacy.jpeg)](https://finmedpartners.com/blog/the-acceleration-of-surcharging-a-new-reality-for-healthcare-payments)

### [The Acceleration of Surcharging: A New Reality for Healthcare Payments](https://finmedpartners.com/blog/the-acceleration-of-surcharging-a-new-reality-for-healthcare-payments)

![David Stievater, Partner](https://finmedpartners.com/hubfs/David%20S%20-%20Sep%202023.jpeg)

[David Stievater, Partner](https://finmedpartners.com/blog/author/david-stievater-partner)

 Surcharging is accelerating. J.D. Power finds 35% of U.S. small businesses now surcharge credit cards. Healthcare is moving faster.

[![](https://finmedpartners.com/hs-fs/hubfs/DSC00909.jpeg?width=352&name=DSC00909.jpeg)](https://finmedpartners.com/blog/ceo-chat-inbox-health)

### [CEO Chat: Inbox Health](https://finmedpartners.com/blog/ceo-chat-inbox-health)

![Blake Walker, Co-Founder, CEO](https://finmedpartners.com/hubfs/DSC00909%20copy.jpeg)

[Blake Walker, Co-Founder, CEO](https://finmedpartners.com/blog/author/blake-walker-co-founder-ceo)

 We founded Inbox Health to approach patient billing as a communication platform rather than just a payment problem.

# The intersection of healthcare and payments

We are keeping tabs on what is happening in healthcare payments. Let us do the work so that you don't have to. Sign up for our weekly newsletter for synthesized insights into the latest news in this space.

[Subscribe Now](https://finmedpartners.com/newsletter-sign-up)

![small-glyph](https://finmedpartners.com/hs-fs/hubfs/small-glyph.png?width=32&height=33&name=small-glyph.png) FinMed Partners LLC

- © FinMed Partners LLC. All rights reserved

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Henri Cattier, Partner",
    "url" : "https://finmedpartners.com/blog/author/henri-cattier-partner"
  },
  "dateModified" : "2025-02-26T00:28:04.922Z",
  "datePublished" : "2025-02-26T00:28:04.000Z",
  "headline" : "Improving Payment Security",
  "image" : [ "https://finmedpartners.com/hubfs/ITRC%20Breach%20Cover%20graphic.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://finmedpartners.com/blog/unbanked-households-decline-to-record-low-0",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://finmedpartners.com/hubfs/FinMed%20Partners.svg"
    },
    "name" : "FinMed Partners"
  }
}
```