A new Kaspersky Lab report says one third of healthcare organization employees it surveyed had experienced a ransomware attack – and not for the first time.

The cybersecurity firm commissioned Opinion Matters to survey 1,758 employees of U.S. and Canadian healthcare organizations. Among those reporting ransomware attacks, more than 80 percent admitted knowledge of up to four such attacks. In fact, 78 percent of U.S. respondents and 85 percent of Canadian ones said their organization had experienced up to five attacks.

Among health IT employees, 27 percent said their organization had experienced a ransomware attack within the past year.

“Healthcare companies have become a major target for cybercriminals due to the successes they’d had, and repeatedly have, in attacking these business,” Rob Cataldo, vice president of enterprise sales at Kaspersky Lab. “As organizations look to improve their cybersecurity strategies to justify employee confidence, they must examine their approach. Business leaders and IT personnel need to work together to create a balance of training, education, and security solutions strong enough to manage the risk.”

More about the study can be found here.