Marana Health is a Federally Qualified Community Health Center operating 11 locations across Pima County, Arizona. Founded in 1957 to serve farm workers, it now provides medical, dental, behavioral health, recovery, pharmacy, and chiropractic services to patients of all ages and income levels through a sliding fee scale program. The organization is part of the healthcare sector's critical infrastructure - exactly the kind of target-rich environment where patient data, EHR systems, and operational technology converge.
From a security standpoint, Marana Health runs athenaOne, an electronic health record system launched in 2025, alongside a patient portal handling appointment scheduling, provider messaging, prescription refills, and access to test results and health records. The threat model here is familiar: protecting protected health information (PHI) under HIPAA, securing web-facing patient access points, and managing the transition to new EHR infrastructure - each surface with its own attack profile. Community health centers operate on tight margins and serve vulnerable populations, making ransomware and data breaches especially consequential.
Across its service lines - medical, dental, behavioral health, recovery, pharmacy, nutritional services, and chiropractic care - the organization manages a broad attack surface spanning multiple care delivery domains. For cybersecurity professionals, the work involves defending health data at scale in an environment where operational continuity directly affects community access to essential care.
