Hospital Network Penetration Test
The Challenge
The hospital group ran a mix of modern and legacy systems across several sites, with medical devices, clinical applications, and corporate IT sharing more network than anyone intended.
Compliance obligations and a recent industry breach pushed leadership to ask what an attacker on the network could reach, and how far a compromised workstation was from patient records.
“The path from a nurse's station to our records system took them an afternoon. Now it does not exist, and we have the evidence to show it.”
The Execution
Scope
We agreed on external ranges, internal segments including clinical VLANs, and strict handling rules for anything touching patient care systems.
Test
From an assumed-breach workstation, Active Directory misconfigurations and flat clinical networks gave a path to the electronic records platform.
Report
Findings were ranked by patient-safety and data impact, with fixes phrased for both the infrastructure team and the clinical engineering group.
Retest
After remediation and segmentation changes, the attack path was re-run and confirmed closed.
The Outcome
The group segmented clinical and medical-device networks, fixed the directory weaknesses behind the attack path, and removed legacy remote access.
The report doubled as compliance evidence, and the hospital scheduled annual internal testing.