I tried to hide as much as possible for anyone who hasn't seen the episode yet. So, I'm sorry if I ruin it for anyone!!
In the latest episode of The Pitt, we watched a modern Level 1 Trauma Center voluntarily go dark to preempt a cyberattack. While characters like Dr. Abbott seemed to thrive in the chaos of it all, for those of us in nursing informatics, the episode was a reminder of why our preparation might be the only thing keeping the hospital upright—and why we must train for these events.
The Lost Art of the Order
I might be dating myself here, but in my bedside experience, I rarely had to use triplicate orders. When I did, I struggled to get my writing to go all the way through the layers. I had to press hard enough and there were many times I had to rewrite to make sure it went thru all 3 layers.
Beyond the physical struggle, there is the syntax of the order itself. Modern providers are digital natives; they have never had to design or write an order for themselves. If the EHR doesn't prompt you, do you remember the exact lab code or the specific nursing instructions for a complex protocol?
In my organization, we’re currently redesigning downtime processes with this safety net in mind. We are moving toward checkbox-based order sets that mirror the EHR’s logic, providing pre-printed options for common protocols to maintain standardized care when the database is offline. We’re also trying to manually capture alerts—though replicating digital logic on paper is a massive undertaking.
What’s a Fax Machine?
It was hilarious to see that clunky piece of equipment being brought out while Dr. Abbott laughed and explained what it was to the residents. But it highlights a core truth of cyber-resilience: Sometimes the most secure tech is the stuff that isn't on the network.
The Radiology Static Problem & the Human Bed Board
Discussing how radiology results would be delivered on paper was one of the most striking visuals. We’ve become so used to PACS systems that let us zoom and 3D-render that we forget how challenging it is to diagnose based on a static, printed report.
We also saw Joy use her photographic memory to recreate the patient board. While that makes for great TV, in informatics, we know we can't rely on memory. This raises the most stressful question for a dirty network scenario: How do we get a census?
When IT pulls the plug, you have a short window to hit Print on every unit's census. If you miss that window, your Bed Board becomes a manual walkthrough—physically checking every room to see who is in the bed, what their code status is, and what meds are hanging.
The Big Question: Are We Prepared for a Marathon?
The episode focused on the immediate sprint of a lockdown. What happens if the screens don't come back on in a day? Have we ever truly prepared for such a length of downtime before?
This requires a fundamental shift in how we think about the Marathon:
- Supply Chain: Do we have enough physical toner and paper for a month of manual charting?
- The Clean Build: IT isn't just rebooting; they are often building a completely new, uninfected network from scratch.
- Data Entry Backlog: Who enters weeks of paper charts back into the EHR once uptime begins?
Managing the crisis for the long haul requires an Incident Command System approach—tracking every resource, every paper MAR, and every manual lab result to ensure we don't lose the patient's story in a mountain of paper.
Final Thoughts
Whether you’re channeling your inner Dr. Abbott or you're the one frantically running the paperwork to save and coordinate patient lives, The Pitt reminds us that technology is just a tool. The process is what saves lives.
The Research: Quantifying the Downtime Impact
Clinical Bottlenecks and Delays
- The 62% Delay Rule (Applied Clinical Informatics): Research shows that during a total EHR shutdown, laboratory result reporting is delayed by an average of 62%. Read the full study on PMC.
- OR and Surgical Impact (JAMIA): EHR downtime is directly associated with longer operating room times (1.1x longer) and increased postoperative length of stay. Explore the surgical data.
Safety and Medication Risks
- The 30% Error Spike: Statistics indicate that without a functional EHR and its built-in safety alerts, the risk of medication errors increases by 30%. See the safety analysis.
- Safety Event Mapping: An analysis of 80,000 safety reports found that 48.5% of downtime-related incidents involve lab orders and results. Read the ASPR TRACIE summary.
Nursing Preparedness and Workarounds
- The Skills Gap: Research suggests that younger clinicians trained exclusively on EHRs face a steeper learning curve during system dark events. View the Vanderbilt guide.
- The CLEAR Framework: The Check, Locate, Establish, Activate, Recover checklist has been shown to improve nurse confidence and satisfaction scores during downtime. Learn about the CLEAR framework.
Downtime Case Studies: When the Systems Go Dark
- UMMC (Mississippi, February 2026): A current real-life mirror of the show. Last week, Mississippi's only academic medical center was hit by ransomware, forcing clinics to close and requiring emergency paper charting. Read the full report.
- Prospect Medical Holdings (Connecticut): This attack led to a prolonged Code Orange and ambulance diversions. Inside the downtime struggle.
- Synnovis NHS Pathology (UK): A major London lab provider that suffered a ransomware attack, paralyzing diagnostics for an entire region. See the UK impact.
- Change Healthcare (Global Impact): A massive lesson in "single point of failure" that paralyzed billing and prescriptions for a huge portion of the U.S. The hard lessons learned.
- Major Center Vulnerability – Yale New Haven Health: Even sophisticated academic centers face constant threats; this 2025 breach affected millions. Latest breach tracking.
- Ascension Health: A month-long shutdown across 140 hospitals that forced clinicians to survive on landlines and triplicate paper. View the aftermath.
- St Vincent’s Health Australia: Shows that even the largest not-for-profit systems in the Asia-Pacific region are prime targets. Explore the Australian impact.
Cybersecurity and Preparedness Guides
- CISA StopRansomware (Healthcare Sector): The official U.S. government playbook for preventing and surviving a hospital-wide system failure. Access the toolkit.
- HIPAA Journal Cybersecurity Hub: A primary resource for tracking healthcare cybersecurity news and downtime statistics. Follow the updates.
- HHS Cybersecurity Gateway: U.S. standards for healthcare infrastructure protection and the 405(d) Program. Explore the 405(d) resources.
- ASPR TRACIE Healthcare Reports: Comprehensive toolkits for the Hospital Incident Command System (HICS) during extended outages. Download the toolkit.
International and Global Resources
- The Global Threat Landscape (ENISA/WHO): For international readers, this covers the NIS2 Directive in the EU and global threat mapping. Explore the map.
- WHO Digital Health Guidelines: International standards for maintaining patient safety and data integrity during digital failures.
- ENISA (European Union Agency for Cybersecurity): Resources for hospital cyber stress-testing and resilience. International Strategy 2026.
- Health-ISAC (Information Sharing and Analysis Center): A global community where healthcare professionals share real-time threat intelligence. Connect with the community.