Blindspot Security Intelligence · Med Spa Study
We Scanned 6,372 Med Spas
1 in 5 Showed an Infostealer Hit
Ordinary med spas. Nothing installed, nothing accessed, public records only.
- 6,372
- Scanned
- 84.7%
- Graded F
- 7%
- Infostealer Hit
- 10.5%
- Portal Exposed
See what the outside world can already discover about yours.
What We Found
The Three Biggest Findings
- 7%
Had Customers on Infected Machines
The highest rate of any industry we scanned.
- 88.1%
Could Not Fully Stop Email Impersonation
A deposit request that looks real is indistinguishable to a client.
- 10.5%
Exposed a Remote Login Portal
A remote-access door, discoverable from public records.
How the Industries Compared
Med Spas Were the Worst on Every Measure We Took
- Title and Financial68.1
- Dental79.4
- Accounting80
- Legal80.2
- Med Spa84.7
Intelligence Without Intrusion
None of This Required Entering the Business
Logging InTesting a PasswordInstalling SoftwareTouching a Network
If Blindspot cannot confirm it, it does not become a finding.
- Pass
- Finding
- Unavailable
The Study
- Practices
- 6,372
- Region
- Florida, All 67 Counties
- Period
- August 2026
- Method
- Public Records
- Confidence
- 97%
Full Methodology
- We read the public records of 6372 med spas in August 2026.
- Blindspot is not a penetration test. We never logged in, never tested a password, never installed anything, and never touched a network.
- If a check cannot be confirmed, it does not become a finding.
- No business is ever named. Every number here is a total, and confidence across the full study was 97%.
Your Business
We Scanned 6372 Med Spas. Now See Yours
Your business has its own email settings, public systems, and exposure. See what anyone can already discover.
Free Security Grade30 Seconds
- No Signup
- No Software
- No Access