Back Health-Isac

What do health care organizations need to know about vishing?

Health-Isac • November 2, 2026

Voice-based social engineering attacks are getting more sophisticated, and health care organizations are a top target.

Health-ISAC and Mandiant both warn that groups like ShinyHunters are making voice phishing a go-to tactic in healthcare. The playbook is consistent: spoof an internal number, pressure an employee into a fake remote login page and harvest the MFA tokens and credentials needed to roam the network and extort the victim, with AI now compressing target research from hours to minutes and erasing language barriers. Errol Weiss and Trevor Horwitz point to the help desk as the control that matters most, with vishing simulations, tighter identity verification for MFA resets and phishing-resistant authentication as the fixes.

Central Ohio Primary Care Physicians was hit with a voice-based phishing (vishing) attack in August, an incident involving the protected health information (PHI) of 1.4 million patients, The HIPAA Journal reports.

The attack is one of a growing number of vishing incidents hitting healthcare. Mandiant flagged the tactic’s rise among financially motivated groups in its M-Trends 2026 report , and Health-ISAC has warned specifically ShinyHunters, which has run highly targeted v ishing campaigns against the sector .

Errol Weiss, CSO at Health-ISAC, and Trevor Horwitz, founder and CISO of cybersecurity company TrustNet, spoke to DHI this attack vector and what healthcare organizations can do to protect themselves.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Healthcare Sector Targeted by Sophisticated Vishing Attacks Vishing attacks, particularly targeting healthcare organizations, have surged, with a notable incident affecting 1.4 million patients at Central Ohio Primary Care Physicians in August 2026. Attackers, including groups like ShinyHunters, employ voice phishing tactics to spoof internal numbers and pressure employees into revealing MFA tokens and credentials. The use of AI has accelerated the research phase for attackers, allowing them to bypass traditional security measures more effectively. Both Health-ISAC and Mandiant have reported a significant rise in these attacks, emphasizing the need for tighter identity verification and vishing simulations. The healthcare sector remains a primary target due to the sensitive nature of the data involved. 2 sources 62

Extracted Entities

What do health care organizations need to know about vishing?

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Companies (1)

Industries (1)

MITRE ATT&CK (1)