The common story about healthcare cybersecurity is that big hospital systems are the targets. The reality is more complicated. Rural America is ground zero — and the math is brutal.

The Change Healthcare attack knocked out 50% of all U.S. medical claims processing. 80% of physician practices lost revenue. 300 hospitals didn't even apply for federal relief — mostly small and rural. But that was the supply chain breaking. The direct attacks on rural hospitals are worse.

In this episode, I break down three things:

First — what the Change Healthcare attack actually revealed about how fragile small-provider healthcare really is.

Second — why rural hospitals are easier targets with the same valuable data. 69% lack basic multi-factor authentication. Most have one or two people handling all of IT — cybersecurity, printers, wifi, everything. And attackers know rural hospitals are more likely to pay ransoms because they can't afford to go offline when the nearest alternative is an hour away.

Third — the AI double-edged sword. Only 29% of healthcare executives feel prepared for AI-powered attacks. But AI might also be the thing that levels the playing field for small providers who will never be able to hire a security team.

Full sources and the deep dive: danmccoymd.substack.com/