Why This Health System Took Down Epic at 10 AM Without Warning - 229

Why It Matters

The drill forces hospitals to validate ransomware response and continuity plans, protecting patient care and reducing regulatory risk in an increasingly hostile cyber landscape.

Key Takeaways

• Health system executed surprise Epic downtime at 10 AM.
• Emergency ops plan activated, command center opened, two‑hour outage.
• Simulated ransomware event, switched to disaster‑recovery data center.
• 100% leadership survey favored repeat drills for resilience learning.
• Future downtimes rebranded as “business resiliency activities” across all shifts.

Summary

The video explains why a major health system abruptly shut down its Epic electronic‑health‑record platform at 10 a.m., treating the event as an unannounced emergency drill rather than a routine maintenance window.

Operators triggered a full emergency operations plan, opened a command center, and offline the system for two hours while simulating a ransomware attack and failing over to a disaster‑recovery data center. The rapid switch tested network, security, and clinical workflows under pressure.

Leaders described the experience as “Go time, buckle up,” noting high stress for clinicians but also a unanimous 100 % leadership vote to repeat the exercise, citing lessons that outweighed the discomfort.

Going forward, the organization will rename such events “business resiliency activities” and schedule them across all three shifts, signaling a cultural shift toward continuous, cross‑shift readiness that could set a new standard for health‑IT risk management.

Original Description

Watch the full episode: The 229 Podcast: Leveraging DevOps for an Innovation Startup and Crisis Leadership with Jim Feen -https://youtu.be/9P6Ig7ylDnQ

Linkedin: https://www.linkedin.com/company/ThisWeekHealth

Twitter: https://twitter.com/thisweekhealth

Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer - https://www.alexslemonade.org/mypage/3173454