Why Healthcare Organizations Are Losing the Cyber War (and How to Fight Back)

In this episode, host Sandy Vance sits down with Gary Salman, CEO and co-founder of Black Talon Security, for a passionate and informative conversation about the growing ransomware crisis in healthcare. With over 30 years in health tech and a background as a part-time law enforcement captain, Gary brings a unique perspective to cybersecurity. He draws parallels between street-level crime and digital attacks. 

Whether you lead a large hospital system or a small specialty practice, this episode is packed with practical insights on how to assess your cyber risk, respond to an active breach, and build a culture of leadership accountability before disaster strikes.

In this episode, they talk about:

• About 90% of breached healthcare organizations end up paying the ransom
• Small practices are just as targeted as large health systems, especially those with strong insurance policies
• Lack of visibility across the full attack surface is the most common security blind spot
• Continuous Threat Exposure Management (CTEM) is replacing outdated point-in-time assessments
• Known Exploitable Vulnerabilities (KEVs) are a primary attacker entry point, yet most orgs patch them too slowly
• AI is helping hackers build malicious tools faster and with less technical skill
• During a breach, deciding how quickly to shut down the network is the most critical early call
• Most IT providers never deliver a documented risk report to leadership, leaving executives in the dark
• Gary's cyber risk grading tool gives non-technical leaders a real-time security score per facility
• Documented, improving risk scores can reduce regulatory penalties after a breach
• Most ransomware attacks are preventable with proper patching, configuration, and monitoring

A Little About Gary:

Gary Salman is the CEO and Co-Founder of Black Talon Security, a leading innovator in cybersecurity solutions for healthcare. With an impressive 32-year career in healthcare technology, Gary is both a seasoned security expert and visionary. In the late 1990s, he developed one of the earliest cloud-based dental practice management systems that was acquired by a publicly traded company in 2002. Gary also has a unique background, as he is still actively involved in law enforcement as a Deputy Sheriff.

Under his leadership, Black Talon monitors and secures approximately 65,000 devices worldwide. The company provides cybersecurity services to a wide range of clients, from small practices to some of the largest healthcare organizations in the United States, including many of the top 20 Dental Service Organizations (DSOs).

As a respected authority in his field, Gary is a frequent lecturer at major national dental association meetings. Black Talon's services are endorsed by numerous state and national associations, affirming his expertise and influence. His work has been highlighted in over 100 prestigious dental and medical publications, reinforcing his status as a thought leader in healthcare cybersecurity. Gary has also trained tens of thousands of healthcare professionals on best practices for securing their practices and clinics.

Beyond preventative measures, Black Talon also specializes in cyberattack remediation, successfully guiding hundreds of healthcare organizations through recovery from security breaches. Their expertise is often enlisted by leading law firms and cyber insurance carriers, underscoring their prominence in the field.