Centra Health is a regional nonprofit healthcare system operating across central and southside Virginia. Founded in 1987, it runs four hospitals and over 70 outpatient and specialty practices, serving more than 500,000 people from facilities in Lynchburg, Danville, Farmville, Moneta, and Bedford.
The threat model is healthcare-specific: protecting electronic health records, medical device networks, and the operational continuity of acute-care facilities. A breach here isn't theoretical downtime - it's disrupted patient care across a sprawling regional footprint. Security operations must account for a mix of legacy clinical systems, cloud-based practice management tools, and the regulatory weight of HIPAA compliance across dozens of distributed sites.
The organization employs nearly 600 providers and maintains a culture oriented around clinical education, mentorship programs like ThriveAP and LEAPP, and continuous professional development. For a security team, that means operating inside a complex human ecosystem where policy adoption and endpoint hygiene depend on clinical workflows, not just IT mandates.
