A cyber incident in healthcare doesn’t just expose records. It can stall billing, knock critical systems offline, and force clinicians into manual workarounds when every minute matters. We sit down with cybersecurity leader Jason Elrod to unpack what real operational resilience looks like inside hospitals and health systems, and why the security mission is ultimately about protecting people.

We start with Jason’s journey from the late 1990s “wild west” of defending ISP infrastructure to building healthcare cybersecurity programs where availability and patient care drive every decision. Along the way, he draws a clean line between information security and cybersecurity, then explains how that distinction shapes team design across GRC, identity and access management, and application security. He also gets blunt about hiring: the most technically gifted person can still be the wrong hire if they damage the team’s ecosystem.

Then we zoom out to today’s threat landscape, where third party risk and vendor concentration can turn a single outage into a system wide problem. Jason shares a practical framework for defining a “minimum viable hospital,” mapping critical workflows end to end, and planning for downtime in ways that go beyond backups. Finally, we tackle AI in healthcare, from job redesign to AI governance that avoids “governance theater” and demands named accountability, monitoring, logging, and clear data access controls.

Subscribe to Cyber Survivor, share this with a healthcare leader in your world, and leave a review with your biggest takeaway or question.

A hospital cyberattack is not just a privacy problem, it is a care problem. When systems go down, patients get diverted, imaging slows, phones can fail, and entire communities feel the shockwave. That’s why I sat down with Scott Gee from the American Hospital Association (AHA), a former Secret Service cybercrime investigator who later did incident response at Microsoft, to talk about what the healthcare cybersecurity threat landscape really looks like on the ground.

We get specific about the difference between headline-grabbing data breaches and the quieter crisis of lost availability. Scott shares what documented ransomware events reveal about real clinical impact, from radiation oncology patients being forced to restart treatment to trauma centers going offline and neighboring hospitals getting overwhelmed. We also dig into what hospitals are doing better now: planning for unexpected dependencies like VoIP telephony, setting up radio backups, and building isolated recovery environments to speed ransomware recovery.

Budgets are tight, especially for rural hospitals, so we talk about practical support programs and why board-level awareness changes what’s possible. We also explore how to build a stronger human firewall through cybersecurity awareness training, phishing tests, and a smart idea I love: bringing cyber into daily safety huddles so reporting a suspicious email gets treated like a patient safety “good catch.”

Finally, we look forward to AI in healthcare, the governance needed to keep patient data safe, and why “trust but verify” matters more than ever as attackers use AI to level up phishing and exploit development. If you found this valuable, subscribe, share with a healthcare leader, and leave a review. What’s the biggest gap in your organization’s cyber readiness right now?

A hospital can sound normal on the outside while everything critical is failing behind the scenes. When cyberattacks hit healthcare, the damage is measured in more than stolen data, it shows up as canceled visits, delayed procedures, and care teams forced to improvise while systems are taken offline. That’s the world behind Cyber Survivor, where healthcare cybersecurity becomes a patient safety story.

I’m Dan Dotson, and this season update looks back at the moments that defined season one: the disruption, the resilience, and the people who held the line. You’ll hear what it’s like when patients arrive for appointments only to find a clinic closed, or when a routine timeline turns into hours longer because the digital backbone of a hospital isn’t there. We also reflect on what leaders learn after surviving a ransomware event, from how a whole organization changes to how cybersecurity investment becomes inseparable from delivering safe care.

Then we turn toward what’s next. Season two launches in October alongside Cybersecurity Awareness Month, and we’re going deeper on patient impact, policy, and the topic everyone’s debating: AI in cybersecurity. How are adversaries using AI to move faster and hit harder? How can defenders use it to detect threats, coordinate response, and protect confidentiality and availability without losing sight of care?

Subscribe now, share with a colleague, and leave a review to help more people understand why stronger defenses protect all of us. What question do you want answered first?