Case Study: Major Hospital Network stops MEDJACK attacks with TrapX Security DeceptionGrid

Medical Device Hijack (MEDJACK) Targets Portable C-Arm X-Ray System

Major Hospital Network, a major healthcare organization, faced the challenge of detecting and stopping a medical device hijack (MEDJACK) attack that leveraged a portable C-arm X-ray system as a foothold into its network. Although the hospital already used standard defenses such as firewalls, intrusion detection, endpoint security, and anti-virus tools, the attacker was able to persist and move laterally across VLANs through the network-connected device. TrapX Security’s DeceptionGrid was deployed to address the blind spot around specialized medical equipment.

TrapX Security implemented DeceptionGrid with emulated medical-device traps and tokens that mirrored real healthcare systems, including X-ray devices. The solution identified the active attacker with high-confidence alerts, provided real-time forensics, and enabled the hospital to remove the compromised C-arm from the network and re-provision it with the vendor. The result was faster detection of hidden threats, reduced attacker dwell time, and improved visibility into attacks targeting network-connected medical devices, with TrapX Security claiming alerts are more than 99% accurate.