Today, 90% of healthcare organizations have experienced an identity-related breach in the past year, and in 2025, healthcare had the highest average ransom payments of any other industry, averaging $1.15 Million. This begs the question: Are healthcare security efforts blind to existing identity-based risks within their organizations?   

The answer: Yes, but not because defenders aren’t trying their hardest. Rather, it’s because modern attacks are centered on exploiting the flaws we leave behind, often in legacy identity and access management (IAM) architectures.  

In this session, Radiant Logic Sr. Solution Consultant Paul Dant will rely on his real-world red-teaming experience to showcase why healthcare is so heavily targeted, and how hackers no longer need rare zero-day exploits thanks to the weakly defended tools and processes that uphold digital identity.  

Cybersecurity and identity leaders in attendance will learn: 

• The biggest risks that drive ransomware, such as weak identity controls, excessive privilege, lateral movement and phishing susceptibility 

• How an overreliance on endpoint detection and response (EDR) and SIEM solutions leaves a major gap in defense 

• How defenders can reduce the IAM attack surface by modernizing their organization’s identity infrastructure.