Journal · 2026-09-11
What ransomware actually costs a 10-person office in Eastern Kentucky
It is not the ransom. It is the week you cannot see patients, pull a deed, or take a card payment.
The invoice is not the crypto. The invoice is a week of paper, a full waiting room, and a bookkeeper reconstructing QuickBooks from email.
Eastern Kentucky offices get the same phishing as everyone else. What they often lack is MFA on Microsoft 365, an off-site backup that has been restored once, and someone who notices a lock screen at 6 a.m. instead of Monday at 9.
We will not sell you a fake SOC. We will turn on MFA, test a restore, lock the admin accounts, and put a monthly check on the calendar. That is the difference between a scare and a closed week.