
Regional health network
A multi-region DR build deferred, and $3.2M moved to clinical technology.
The situation
Three consolidated teaching hospitals with 9,500 employees hold a 6.8 PB estate and a 25-year PHIPA archive. After a ransomware wave the CISO faced weekly board scrutiny, while the CFO carried $4.1M a year in DR replica cost.
What forced the question
- Weekly board scrutiny of ransomware readiness
- $4.1M a year in DR replica cost
- A multi-region DR project and a vault purchase were both planned
What was deployed
6 of 9 fragments · any 6 rebuild the data
- Unchanged
- Existing backup product retained
- Restore authority
- 4 of 12 named authorizers
- Regions
- Dual region
“The vault purchase changed shape once we saw what fragmentation delivered. We still bought it, but not for the reason we had been planning to.”
What changed
Questions a buyer asks
Can ransomware reach the recovery copy?No single administrator, account or site holds more than three fragments, and six are needed to read or rebuild.
What if a provider or site is lost?Any one provider, region or site can be offline and at least six fragments remain.
Who can restore?Four of twelve named authorizers must approve a restore.
Did it replace the vault?No. The vault was still bought, as a complementary layer and not as the primary answer.