Our security vendor manages our endpoints. We passed our audit.
Ransomware enters through a compromised vendor portal and encrypts the electronic health records system. Doctors cannot access patient histories, medication lists, or allergy information. Surgeries are postponed. Emergency patients are diverted. The hospital pays $4.5M in ransom because lives are at stake. The backups were also encrypted because they were on the same network. Atlanta spent $17M recovering. Baltimore spent $18M.
Edge classifies the ransomware payload at the network edge before it reaches any workstation. The payload is quarantined through domain incompatibility. It is placed in a non-binary environment where binary executables cannot run. The hospital receives a report showing exactly what was blocked. No workstation is affected.