Phishing is the most common vector in HIPAA breach reports — Ambry Genetics (September 2026, $700,000 settlement, 225,370 individuals affected) is one of several 2026 cases. Phishing Training runs the simulations and keeps the per-person record §164.308(a)(5) rewards.
What it does
- Runs scheduled, healthcare-specific phishing simulations across the workforce.
- Captures per-person outcomes: delivered, opened, clicked, reported, remediated.
- Fires just-in-time micro-training on click, with the lesson tied to the lure.
- Reports click-rate and report-rate trends by department for board updates.
How it maps to HIPAA
The feature contributes to §164.308(a)(5)(ii)(A) (security reminders), §164.308(a)(5)(ii)(B) (protection from malicious software), and §164.308(a)(6) (security incident procedures) — because a reported phishing attempt that is contained before anyone clicks is the ideal incident outcome.
Where it fits
Phishing Training is a Workforce module capability and runs alongside Employee Training. The AI-and-vendor angle on current phishing patterns is in the HIPAA and AI tools post.