How a 12-Clinic Healthcare Group Retired Its Legacy VPN and Stopped Phishing Losses
Zero trust · Regional healthcare group · 12 clinics
- Standing admin rights down 91%
- Successful phishing attacks: 0 in 18 months
- Audit findings closed: 27 of 27
The situation
The group relied on flat VPN access across its clinics.
What we did
We replaced the flat VPN with conditional access, introduced hardware-key MFA for privileged roles, segmented clinical VLANs, and extended MDR coverage to every endpoint and identity.
The results
Standing admin rights fell by 91%, there were no successful phishing attacks in 18 months, and all 27 audit findings were closed.
Client name withheld under NDA. References available on request.