New: free 7-day silent pilot for every plan

Home / Case Studies / Brightpath Healthcare

Healthcare • 12 clinics • 900 devices

Faster response, calmer compliance reviews

Portrait of Daniel Osei, CTO of Brightpath Healthcare Daniel Osei, CTOBrightpath Healthcare

The challenge

Twelve clinics, one small IT team, and patient data that ransomware crews specifically hunt. Brightpath's legacy setup generated constant false positives that pulled technicians away from patient-facing systems, while a looming HIPAA review demanded evidence they couldn't easily produce. “Every alert felt like choosing between security and patient care,” says Osei.

12 hrs

saved weekly on incident triage

3 wks

early for HIPAA review readiness

100%

of ePHI stores encrypted & audited

The approach

Brightpath paired Threat Detection with Data Privacy: sensors on every clinic workstation plus automatic discovery and encryption of patient records. Vernox quieted the noise to a handful of reviewed events per week, and compliance evidence became a scheduled export instead of a quarterly scramble.

  • ePHI auto-discovered across file shares and EHR backups
  • After-hours device isolation protecting unattended clinics
  • Role-based access so locum staff see only their patients
Clinician workstation secured with Vernox monitoring
“Vernox hardened our defenses and streamlined incident response in one move — saving our team hours every week. We walked into our HIPAA review three weeks early.”
Daniel Osei, CTO — Brightpath Healthcare

Related stories