EPIC Health is a multi-specialty healthcare practice operating 11 locations across Michigan and Illinois, delivering comprehensive medical services from pediatrics to geriatric care, including primary care, pain management, addiction treatment, cardiovascular services, and neurosciences. Founded in 2000, it also runs EPIC Express Care for urgent care needs.
In healthcare, the threat model is existential: protected health information (PHI) under HIPAA, ransomware targeting clinical operations, and the cascading impact of downtime on patient safety. With 11 facilities and a broad service offering spanning chronic conditions management and addiction services, EPIC Health's attack surface is wide - endpoint proliferation across clinics, connected medical devices, telehealth workflows, and the exchange of sensitive data between diverse specialist teams.
Securing a family-owned, mission-driven healthcare organization of this scale means building defenses around electronic health records, ensuring compliance across state lines (Michigan and Illinois), and hardening infrastructure that clinicians depend on daily. The work here isn't theoretical - it's protecting the systems that deliver care to communities.
