Hugh Chatham Memorial Hospital

Varonis helps Hugh Chatham Memorial Hospital clean up the security of more than a terabyte of network file shares

PDF download




The Customer

Location: Elkin, North Carolina

Industry: Healthcare

Products: Data Classification Framework, DatAdvantage for Exchange and Windows, and DatAlert

Hugh Chatham Memorial Hospital, which serves patients in the Yadkin Valley region of North Carolina and Virginia, employs more than 800 people, provides healthcare services for the community and is served by more than 70 physicians representing 26 specialties and subspecialties.

Hugh cha

We completely cleaned up the security of more than a terabyte of network file shares. Seeing the results of the changes was huge. In any organization but specifically in a hospital, the end user’s tolerance for change is pretty low. If you have nine hundred or a thousand users and only 5 or 10 of them are actually accessing the data available in an everyone group, it becomes a no-brainer.

— Lee Powe — CIO, Hugh Chatham Memorial Hospital

BUSINESS REQUIREMENTS:

  • Monitoring: unusual file activity and user behavior.
  • Data access and classification:The company needed a solution that could help identify who has access to which files, see who was accessing files, and lock down unnecessary access.

THE VARONIS SOLUTION / RESULTS

The Hugh Chatham Memorial Hospital IT team’s search for the right solution to control the security of its data led to the evaluation and implementation of Varonis Data Classification Framework, DatAdvantage for Exchange and Windows, and DatAlert.

Alerting on Ransomware Attacks

Lee Powe, Hugh Chatham Memorial Hospital’s CIO, said, “A week into our implementation we had a brush with ransomware. One of the employees remotely connected and went on a site that started downloading Locky. Luckily the Varonis rules we had in place immediately told me when the individual started encrypting the file, so we disabled the account and restored the files. Without Varonis we would have ended up with a much broader exposure of the breach and the result would have been a lot worse.”

With DatAdvantage and DatAlert in place, Hugh Chatham Memorial Hospital can easily identify who has access to which files, when they access those files and set triggers for any unusual activity, particularly for ransomware threat activity like mass encryptions. By increasing its security and preventing ransomware, Varonis has not only improved the hospital’s overall security posture, it also means the IT team doesn’t have to spend days recovering data.

Implementing a Least Privilege Model

With the Data Classification Framework, Varonis was able to help Hugh Chatham Memorial discover sensitive content within its environment, see who had access to what, and help lock down access without interrupting the businesses workflow.

“We completely cleaned up the security of more than a terabyte of network file shares,” said Powe. “Seeing the results of the changes was huge. In any organization but specifically in a hospital, the end user’s tolerance for change is pretty low. If you have nine hundred or a thousand users and only 5 or 10 of them are actually accessing the data available in an everyone group, it becomes a no-brainer.”

Compliance and E-Discovery Requests

Powe added, “When I receive a compliance request for a report on a particular user and their file activity over a specific period of time, it takes me less than a minute to run. Before Varonis, it would have taken hours and hours going through log files to try and compile a user’s activity in relation to network file shares.”
                                                                                                                       ***

Varonis Risk Assessments quickly show you where your most vulnerable data is stored, who is accessing it, and what needs to be done to secure it. Find out more here.