Maintenance Notice

Due to necessary scheduled maintenance, the JMIR Publications website will be unavailable from Wednesday, July 01, 2020 at 8:00 PM to 10:00 PM EST. We apologize in advance for any inconvenience this may cause you.

Who will be affected?

Accepted for/Published in: JMIR Medical Informatics

Date Submitted: Dec 12, 2024
Date Accepted: Jul 11, 2025

The final, peer-reviewed published version of this preprint can be found here:

Resilience in the Face of Disruption: Viewpoint on the CrowdStrike Incident in July 2024

Dennis CR, Evans CS, Duckworth K, Skinner MM, Hanna J, Thompson T, Herring D, Medford RJ

Resilience in the Face of Disruption: Viewpoint on the CrowdStrike Incident in July 2024

JMIR Med Inform 2025;13:e69958

DOI: 10.2196/69958

PMID: 40896838

PMCID: 12404578

Resilience in the Face of Disruption: A Viewpoint on the CrowdStrike Incident in July 2024

  • Christopher R Dennis; 
  • Christopher S Evans; 
  • Kathleen Duckworth; 
  • Misty McLawhorn Skinner; 
  • John Hanna; 
  • Tanya Thompson; 
  • Donette Herring; 
  • Richard J Medford

ABSTRACT

In an era where healthcare is increasingly dependent on digital infrastructure, the resilience of health IT systems has become a cornerstone of patient safety and operational continuity. As cyber threats grow in frequency and sophistication, healthcare organizations have turned to advanced cybersecurity tools to safeguard their systems. Yet, even the most robust defenses can falter. On July 19, 2024, a routine update from a widely used cybersecurity platform triggered a widespread IT disruption. A flawed sensor configuration led to 8,647 BSOD events, with 729 devices requiring manual remediation. What unfolded was not just a technical crisis, but a test of organizational agility, collaboration, and resilience. This viewpoint traces the response to that disruption, highlighting the pivotal role of clinical informaticists and the coordinated efforts that enabled a rapid recovery. From the formation of an incident response team to the triage and mitigation of impacted systems, the response was swift and strategic. Clinical informaticists emerged as key players, bridging the gap between technical teams and frontline care providers. They identified workflow disruptions, facilitated communication, and ensured that patient care remained as uninterrupted as possible. Despite the scale of the outage, operations continued with minimal disruption—thanks to early recognition, decisive action, and cross-disciplinary collaboration. This incident underscored the importance of a well-practiced response plan, clear communication channels, and the integration of clinical expertise in technical recovery efforts. As we reflect on this event, several lessons emerge: the need for continuous refinement of incident response strategies, the value of regular training exercises, and the critical role of clinical informatics in navigating digital crises. This paper calls for a renewed commitment to building resilient health IT ecosystems—ones that can withstand disruption and continue to support the delivery of safe, effective care.


 Citation

Please cite as:

Dennis CR, Evans CS, Duckworth K, Skinner MM, Hanna J, Thompson T, Herring D, Medford RJ

Resilience in the Face of Disruption: Viewpoint on the CrowdStrike Incident in July 2024

JMIR Med Inform 2025;13:e69958

DOI: 10.2196/69958

PMID: 40896838

PMCID: 12404578

Download PDF


Request queued. Please wait while the file is being generated. It may take some time.

© The authors. All rights reserved. This is a privileged document currently under peer-review/community review (or an accepted/rejected manuscript). Authors have provided JMIR Publications with an exclusive license to publish this preprint on it's website for review and ahead-of-print citation purposes only. While the final peer-reviewed paper may be licensed under a cc-by license on publication, at this stage authors and publisher expressively prohibit redistribution of this draft paper other than for review purposes.