st lukes

Nevada’s Largest Healthcare Provider Achieves 86% Reduction in RTO, Enhances Identity Protection & Recovery With Rubrik

In a ransomware scenario, authentication is everything. Without it, nothing else matters. Rubrik 
Identity Recovery gives us the confidence that we can rapidly restore our entire Active Directory 
infrastructure, enabling us to bring critical applications back online without paying a ransom or 
risking reinfection.

Steven Ramirez
Chief Information Security Officer, Renown Health
masthead

CHALLENGES

As Nevada’s largest healthcare provider, serving over one million patients, Renown Health wanted to protect their investments in innovation and technology to ensure they support their modern patient care and communities needs.

Modernize Recovery Times in a 24/7 Industry: Legacy backups can take over a day torestore critical systems. This meant potentially fatal delays when ICU monitors, patient record systems, and emergency services depend on immediate data access.

Protect Against Identity Attacks Targeting Healthcare: With 80% of breaches now involving compromised credentials, Renown’s Active Directory (AD) service became a prime target for ransomware groups specifically hunting healthcare organizations.

Protect Against Downtime: Every Minute of Downtime Puts Lives at Risk: Unlike industries where downtime means only lost revenue, Renown’s downtime could mean delayed surgeries, inaccessible patient histories, and compromised critical care, a human cost that directly impacts patient outcomes.


OUTCOMES

With Rubrik, Renown Health realized:

Significant Decrease in Cyber Insurance Premium:

Secured a reduction in cyber insurance premiums by demonstrating measurably stronger resilience and recovery capabilities

Reduced RTO by nearly 86%:

Lowered cyber RTO from 24 to 3 hours with Rubrik’s Identity Recovery. Renown Health achieved same-shift recovery during cyber incidents, eliminating extended downtime that could compromise patient safety and organizational revenue.

1-Day Deployment of Identity Recovery Solution:

Successfully implemented a full
deployment of Rubrik’s Identity Recovery within one day.

A Paradigm Shift in Healthcare 


Renown Health understood that the healthcare landscape had undergone a paradigm shift following the Affordable Care Act in 2010, creating an imperative for high availability of their systems and data along with robust recovery capabilities. Renown’s CISO Steven Ramirez emphasized the importance of preparing for the full spectrum of cyberattacks, which have become increasingly prevalent in healthcare.

“Through tabletop exercises, we identified critical Tier Zero clinical services that need to be operational within 12 hours of an incident. With Rubrik, we established the essential requirements for clean, immutable backups and orchestrated recovery capabilities to facilitate quick restoration of trust during incidents, ensuring a malware-free environment that avoids reinfection,” noted Ramirez.

PRODUCTS & SERVICES

  1. Enterprise Data Protection

  2. dentity Recovery C

  3. M365 Protection

TRANSFORMATION WITH RUBRIK

Comprehensive Cyber Resilience for Tier Zero Applications 

Healthcare is a prime target for cybercriminals, with 93% of organizations experiencing an identity incident within the past year. A compromise to the ubiquitous AD or Entra ID wouldcripple business operations and halt patient care.

With their focus on protecting AD, Renown Health implemented Rubrik Identity Recovery to cut AD recovery time from 24 hours to under 3 hours, ensuring comprehensive, orchestrated recovery.

Rubrik’s comprehensive Identity Recovery solution enabled Renown Health to improve their identity security posture, and the simultaneous restoration of compromised on-prem AD and cloud-based Entra ID, ensuring these interconnected systems are restored in tandem. By leveraging malware-free and clean room recovery processes, Rubrik ensures a clean, uncompromised restoration, accelerating hybrid recovery from days or weeks to hours, and drastically reducing the risk of reinfection after an incident. Moreover, using the unified Rubrik platform allows for vendor and tool consolidation as well as audit and compliance readiness.

Since successfully deploying Rubrik Identity Recovery across the enterprise in one day, RenownHealth strengthened their identity security posture and were positioned as a leader in holistic, automated, and secure recovery across both on-premise and cloud identity systems. As they continue to navigate the complexities of modern healthcare challenges, their investment in Rubrik provides the foundation for cyber resilience, ensuring patient data remains secure and identity integrity is maintained with zero-trust security.

Threat actors know that compromising domain controllers gives them the keys to the kingdom. With Rubrik Identity Recovery, we can restore AD to a clean, point-in-time state within hours—not days—ensuring authentication remains intact even during the most severe incidents. That level of precision and security is what sets Rubrik apart and what gives our leadership team confidence in our cyber resilience posture.

Steven Ramirez
Chief Information Security Officer, Renown Health