Back online in three weeks after ransomware hit six locations
A North Texas orthopedic and pain management group with six locations
At a glance
- Size
- 12 providers, about 100 staff
- Locations
- 6 locations across North Texas
- Systems
- eClinicalWorks, Microsoft 365, SharePoint, PACS imaging
- Confidentiality
- Client identity confidential
The situation
A ransomware attack disrupted every location, leaving the organization offline and unable to reach critical systems. The group relied on aging, on-premises infrastructure for email, file storage, and essential business applications, which complicated recovery. A software licensing investigation by BSA, The Software Alliance, added another challenge during an already critical period.
What Galleon did
- Replaced aging hardware and deployed new network equipment across all locations.
- Designed and deployed VMware server infrastructure for core business applications.
- Migrated email to Microsoft 365 and implemented SharePoint for centralized file storage and collaboration.
- Consolidated separate phone systems into a unified, cloud-based VoIP platform.
- Recovered electronic protected health information from legacy systems and secured the recovered data.
- Deployed endpoint detection and response across all new systems.
- Managed the technical requirements of the breach investigation and supported the software licensing review, validating license compliance.
The result
All systems were back online within three weeks, and staff regained access to the applications and data they needed to resume daily operations. The recovery left the group with refreshed server, workstation, and network infrastructure, cloud-based email, centralized file management, unified communications across locations, recovered ePHI, EDR on every new system, and validated software licensing.
At the height of the crisis, the partners believed they might have to close their doors. The majority partner later told Galleon its support had saved the business.
Why it mattered
The recovery helped the practice avoid closure and return to seeing patients. Modernized infrastructure and stronger endpoint protection left the organization on a more dependable foundation.