| In a recent episode of HBO’s The Pitt, the emergency department is already running at full tilt when a different kind of alarm starts ringing.
Two nearby hospitals have been crippled by ransomware, forcing them to shut down critical systems and scramble to keep patients safe. Determined not to suffer the same fate, administrators at Pittsburgh Trauma Medical Center (“the Pitt”) make a drastic call: pull the plug on their own network before the hackers can get in.
Instantly, the hospital’s digital backbone disappears. Doctors and nurses are thrust back into a pre-digital era, relying on paper charts, whiteboards, and institutional memory to keep the emergency department running.
It’s gripping television. But the risk it portrays is anything but fictional.
When cyber incidents hit healthcare systems
Earlier this week, medical technology company Stryker experienced a global outage tied to a suspected cyberattack, forcing employees to disconnect remote devices and halt certain operations while investigators worked to contain the incident. The attack reportedly wiped Windows-based machines and disrupted systems across the company’s network.
Stryker isn’t a niche provider. The Michigan-based company employs roughly 56,000 people across 61 countries and produces surgical equipment, orthopedic implants, and other technologies used in hospitals across the globe.
When a company of that size experiences even a temporary system disruption, the ripple effects can extend far beyond corporate headquarters.
Hospitals depend on an intricate digital ecosystem that connects device manufacturers, billing platforms, patient records systems, pharmacies, and insurers. When even one piece of that network goes down, healthcare providers may lose access to critical tools needed for day-to-day operations.
A sector under siege
Healthcare has become one of the most attractive targets for cybercriminals in recent years. The reason is simple: The stakes are incredibly high.
Hospitals and healthcare companies store enormous volumes of sensitive information—from patient medical histories to insurance records and Social Security numbers—making them prime targets for ransomware groups.
But the consequences of these attacks often extend beyond stolen data.
“Unfortunately, hundreds of ransomware attacks against hospitals and our mission-critical third parties have shown us that we need to be prepared to deliver safe and quality care for 30 days or longer without the benefit of connected technology,” said John Riggi, National Adviser for Cybersecurity and Risk at the American Hospital Association.
Why you should care: Cyberattacks increasingly disrupt real-world operations, not just computer systems. When healthcare providers, infrastructure companies, or key vendors experience outages, organizations can face cascading disruptions that affect employees, operations, and supply chains.
That’s why cybersecurity incidents must be treated like any other critical event, with coordinated response plans, resilient systems, and clear communication protocols. Because in today’s connected world, a cyberattack on one organization can quickly become everyone’s problem. |