Perfect Your Practice

AOA FOCUS logo

Home / News / Practice Management / Perfect Your Practice / 5 types of cybercrime practice owners can’t afford to ignore

5 types of cybercrime practice owners can’t afford to ignore

October 12, 2025

Know your weak spots.

Tag(s): Practice Management, Perfect Your Practice

Key Takeaways

  • Familiarizing yourself with the risks your practice faces can keep your practice and patient data safe. 

Running a thriving practice requires focused attention on patients, staff and day-to-day operations. Behind the scenes, however, cyber criminals are working just as hard to find ways to access valuable data. With sensitive patient data, reliance on technology, and often limited IT resources, optometric practices are increasingly seen as attractive targets for cybercrime. By knowing which attacks are most likely to affect optometric practices, practice owners can take proactive steps to keep their practices and patients safe.   

1

Ransomware

  • What is it?
    Ransomware is malicious software that encrypts a practice’s data or locks down systems, then demands payment (often in cryptocurrency) to restore access. Unfortunately, paying ransom does not always guarantee the access will be restored to the rightful owner, and some data may still be stolen. 
  • Why are optometric practices vulnerable?
    Health care practices are reliant on real-time access to patient records, and even short downtime can be disruptive. Smaller practices often have less robust defenses, fewer resources for data backups, and may be more likely to pay to regain access quickly. 
2

Social engineering (phishing, vishing, smishing, email impersonation) 

  • What is it?
    Social engineering is the deceptive manipulation of people to trick them into divulging confidential information, providing access to secure systems, or performing actions that compromise security. Cyber criminals impersonate trusted sources via channels like phone, email or text to trick staff into providing credentials, installing malware, or sharing sensitive information. 
  • Why are optometric practices vulnerable?
    Independent health care practices often have less training and fewer protocols in place. Cyber criminals are able to create sophisticated communications that may look or sound legitimate to busy staff members. Practices also may have limited IT or security resources available to monitor or filter risky communications. 
3

Malware

  • What is it?
    Malware is malicious software designed to damage or exploit systems. This software could steal login credentials, weaken firewalls, spy on users and create “backdoors” through which hackers can access a practice’s systems at will, facilitating further attacks like ransomware. 
  • Why are optometric practices vulnerable?
    Outdated software or unpatched systems tend to be more common in smaller practices. With less investment in advanced endpoint protection, it is easier for cyber criminals to access systems and install malware, opening the door to creating larger issues for the practice. 
4

Insider threats and human error 

        • What is it?
          A total of 95% of cyber attacks can be attributed to human error. Mistakes or misuses by employees, such as using weak passwords, falling for social engineering schemes, accidentally leaking data, or, in rarer cases, intentionally exploiting sensitive practice data can put a practice at a greater risk for cybercrime.  
        • Why are optometric practices vulnerable?
          Independent practices may have less formal oversight in place. A heavy patient load leaves less time to audit employee access to systems and conduct regular staff training. The more manual processes utilized as part of a practice’s daily operations, the more opportunities for human error. 
        5

        Attacks on outdated systems 

          • What is it?
            Cyber criminals exploit weaknesses in cloud providers, software tools or legacy systems that have not been regularly updated to gain access to sensitive information. Software updates often include important security updates to strengthen the software against attacks and failing to keep software up to date could leave a practice exposed. 
          • Why are optometric practices vulnerable?
            Optometric practices often use third-party software (EHRs, billing, imaging, etc.), telehealth platforms, and may have some devices that are older or less secure than newer models. Budget constraints may delay updating or replacing legacy or unsupported systems and software. 

          Familiarizing yourself with the risks your practice faces is the first step to keeping your valuable practice and patient data safe. However, preparation also means equipping yourself for the worst-case scenario. AOA members have access to robust cyber liability insurance through AOAExcel®’s endorsed partner, Lockton Affinity. In the case of a breach, practice owners insured by Lockton Affinity have access to an extensive network of cyber response professionals to guide them through the necessary steps following a cyber attack. Learn more about coverage options.