ABA Email Security: 2025–2026 Industry Report
The first and only analysis of email security across 740 ABA therapy providers, scanned weekly since September 2025.
What You'll Learn
54% of ABA practices can be impersonated via email
More than half of providers lack DMARC protection, leaving them vulnerable to spoofing attacks that could compromise PHI and payer relationships.
3 fixes would move the industry from 4.5 to 7.5 out of 10
Simple, specific steps that any practice can implement — most in under 30 minutes with their existing email provider.
Google vs Microsoft: which protects ABA practices better?
We compared default security configurations across email providers to show which gives ABA practices the strongest out-of-the-box protection.
How top-quartile practices differ from the rest
What separates the best-protected ABA organizations from the majority — and the specific configurations that matter most.
Download the Full Report
Enter your email to receive the complete report with all findings, benchmarks, and recommendations.
Research conducted by ABAOps.ai • Data from September 2025 – February 2026