Blog
EMS Cybersecurity Insights & Resources
Thermal-Imaging Cameras on the Network: A New Attack Surface
Modern FLIR and Bullard TICs connect to truck Wi-Fi. Default credentials and poor segmentation create a backdoor into your operational network.
Hydrant, Hydraulics, and Water System Data Disclosure Risks
Fire departments publish tactical water supply data on open portals. A records-management approach that protects mission data without breaking transparency.
AI Dispatch Transcription — Hidden PHI in the Output
AI transcription of 911 dispatch audio creates a PHI exposure at the LLM stage. What agencies need in the contract before signing.
Wearables on Duty — Smartwatch PHI Risks and Agency Policy
Smartwatches and smart rings on first responders collect data in patient care zones. Agencies need a policy for BYOD wearables, whether issued or personal.
EMS Telemedicine Integration: BAA Chain and Security Architecture
How to secure the provider-on-the-truck telehealth workflow for community paramedicine and ET3, with the BAA chain and link-drop failure modes.
Portals and HIPAA Right of Access for EMS: Timelines, Audit Logs
The HIPAA Right of Access timeline, what an EMS patient portal needs, and why ePCR audit logs might not hold up in an OCR investigation.
12-Lead Transmission and STEMI Notification Security
How your 12-lead ECG reaches the receiving cath lab today, the HIPAA exposure in each path, and the architecture that is both faster and more defensible.
Bluetooth Pairing on the Cardiac Monitor — Security Risks and Firmware Reality
Cardiac monitor Bluetooth pairing creates an attack surface in crowded ED hallways. A practical look at LifePak, Zoll, and Corpuls security.
Connected Vehicle Telemetry and Who Owns the Apparatus Data
Fire apparatus and ambulances are data centers on wheels. Who owns the telemetry data, and what to negotiate before the purchase order is signed.
USB Drops at Fire Stations — Threat Model, Group Policy Controls, and the Charging Problem
Fire stations face a unique USB drop threat from open bay doors and unattended workstations. Technical controls and the policy fix for the charging problem.