US Cyber Chief Launches Pilot to Bolster Rural Hospital Defenses

"Project Lifeline 250 connects the world‑leading American industry with rural hospitals and uses the greatest American tools and capabilities to defend hospital networks; deploy physical back up devices after an initial incident to ensure an impacted hospital can still provide critical care; and identify high‑risk and legacy devices and replace them," National Cyber Director Sean Cairncross said in a statement.

Project Lifeline 250: a six‑month regional pilot led by the Office of the National Cyber Director

The Office of the National Cyber Director (ONCD) rolled out its second regional cyber pilot program, this one focused on rural hospitals. Sean Cairncross visited South Carolina on Monday to debut the six‑month effort, which is explicitly modeled on the office’s first pilot in Texas that connected industry partners with the water sector. The new program is intended to bring private‑sector capabilities into rural hospital networks, and to supply physical backup devices after an initial incident so an affected hospital can continue providing critical care, according to Cairncross’s statement.

Participating firms named: Abnormal AI, Cisco, Cyera, Microsoft, Rilian Partners, Trellix and Zscaler

The ONCD said some of the same companies that provided free services in the Texas pilot are involved in South Carolina’s rollout, alongside additional participants. The firms the office identified by name are Abnormal AI, Cisco, Cyera, Microsoft, Rilian Partners, Trellix and Zscaler. The announcement frames those vendors as the link between “world‑leading American industry” and resource‑constrained rural hospitals.

State partners in South Carolina: Critical Infrastructure Cybersecurity program, SLED and local governments

Besides private industry and the ONCD, the initiative brings in the South Carolina Critical Infrastructure Cybersecurity program, the South Carolina Law Enforcement Division (SLED) and local governments. South Carolina Gov. Henry McMaster endorsed the effort in a statement, saying, "Cyber threats are a rising challenge to our nation’s security, and we must remain vigilant to protect the systems our communities depend on," and calling Project Lifeline 250 "another important step toward ensuring South Carolina’s rural hospitals have the resources they need to defend against cyberattacks and continue providing critical care."

Healthcare breach context and the FBI’s 2025 assessment

The announcement positioned the pilot against a stark recent record in health care cybersecurity. The health care sector experienced a record year for breaches last year, with 804 large breaches reported to the Department of Health and Human Services’ Office for Civil Rights that affected more than 140 million people. The FBI identified the health care sector as the top target for ransomware and other hackers in 2025. The ONCD’s statement and the participating companies framed Project Lifeline 250 as a response to those trends and to resource shortfalls in rural hospitals similar to those documented in other critical infrastructure sectors.

What this means for technologists, members of Congress, and rural hospitals

• Technologists and security teams: The pilot emphasizes identifying "high‑risk and legacy devices and replace[ing] them," and deploying tools and backup hardware after incidents — concrete activities vendors and hospital IT teams are expected to carry out during the six‑month program, as described by the ONCD.
• Members of Congress and policymakers: Members of Congress have introduced legislation intended to aid rural hospital cybersecurity, signaling parallel policy activity even as the ONCD pursues these operational pilots.
• Rural hospitals and local governments: The program promises industry expertise, visibility into where patient data lives and who can reach it, and the delivery of physical backup devices after an incident — measures framed as reducing ransomware leverage and enabling continued critical care.

Industry voices framed the pilot as urgent. Yotam Segev, cofounder and CEO of Cyera, said, "The stakes for critical infrastructure are getting higher and higher," adding that "there’s real urgency in bringing cyber expertise from some of the world’s largest and most complex enterprises to rural hospitals through Project Lifeline 250." He argued that when a hospital knows where its patient data lives and who can reach it, it can reduce the leverage behind ransomware.

The ONCD has not specified what will happen at the end of the six‑month pilots, and the office has so far partnered with, or publicly discussed partnering with, GOP‑led states. Those unresolved items — the pilots’ end state and the geographic scope of future partnerships — are explicit next steps the program has yet to address publicly.

Read the original CyberScoop story: https://cyberscoop.com/oncd-rural-hospital-cybersecurity-pilot-project-lifeline-250/