The largest healthcare breach ever recorded began with stolen credentials and a missing MFA prompt on a remote-access portal. Not a medical device, not an EHR flaw. A login. The incidents below are the same story at different scales.
Compromised credentials on a remote-access portal with no multi-factor authentication. Once inside, attackers moved laterally across systems, turning a single entry point into a nationwide disruption. (Source: UnitedHealth testimony to Congress)
Vendor and partner connections into clinical systems, granted for a purpose and never reviewed against it afterwards.
The pattern behind incidents like these is not sophistication. It is MFA that was never enforced on a path somebody forgot was reachable.
Clinical environments are built for speed of access, and controls that slow clinicians down get worked around by the end of the week. That is why the gap is almost always a shared login, a vendor connection or a remote portal — the places speed was prioritized over attribution.
If any answer is "no" or "I would have to ask", that is the blind spot.
The two-page PDF adds the full account of each incident and the control that would have stopped it. Name and work email, and it comes straight back.
The sector page: identity security for healthcare. The service that closes the gap: PAM implementation. And a free audit is 30 minutes with a certified engineer on your own environment, findings in writing: Get a free audit.
Name and work email. The two-page PDF covers each incident in full and the control that would have stopped it.
Needed for the site to work — page delivery, and the spam protection on our forms. These do not track you and cannot be switched off.
Google Analytics and Microsoft Clarity, so we can see which pages are useful and which are confusing. Clarity hides anything you type into a form. We use this to improve the site, not to identify you.
ZoomInfo WebSights, which tells us which organisation a visit is likely to have come from and which pages were read. With this on, ZoomInfo may also set third-party cookies that help it recognise a visit across other websites, and may share that with its own partners. Turning this off stops all of it.
