How Kelsey-Seybold Clinic recovered from a ransomware attack

Ransomware attacks cost healthcare organizations over $20 billion in 2021, with patient care and continuity at risk. To defend and recover from such attacks, data backup and rapid restore are essential. Martin Littmann, CTO and CISO at Kelsey-Seybold Clinic, shared his experience of a ransomware incident and stressed the importance of vigilant security practices, user education, and the implementation of immutable data snapshots and backups. The clinic also shifted its security strategy and upgraded its SIEM and SOAR tools to enhance threat detection and response capabilities. A second backup/recovery data center was established to mitigate risks, and while cloud solutions were considered, a hybrid model was deemed more suitable.