All six hospitals were back on their electronic systems by December 30th.
We never paid the ransom. Not one dollar. Devin’s team and the FBI confirmed that the hackers had gotten into our clinical systems but never reached the billing database where patients’ Social Security numbers and bank information were stored. Our lawyers still sent notification letters to every patient whose records might have been viewed, as federal law requires, and our cyber insurance policy covered two years of free credit monitoring and identity theft protection for anyone who wanted it.
The total cost of the attack, including the forensic investigation, overtime pay, legal fees, the notification letters, and the credit monitoring, came to $3.1 million. The insurance policy covered all of it except the $250,000 deductible.
Three years earlier, I’d stood in front of the finance committee and argued for that policy. One board member called it “paying for a fire that will never happen.”
Not one patient was harmed during the outage.
I’d love to call it luck. It wasn’t. It was eleven years of drills nobody liked, staff who had rehearsed, and a woman named Marisol who said, “Open the boxes.” In the end, it was thousands of people who pulled a plastic bin down from a shelf and started writing without complaint.
The board met on January 3rd.
I’d half expected a reprimand. A stolen password at one of our clinics had caused all of it, and as COO, our clinics were ultimately my responsibility. I stood in the ninth-floor boardroom in my navy suit, holding a folder that contained my written analysis of every failure, including my own.
Alan Prewitt looked at me for a long time from the head of the table.
“Lydia,” he said. “We’d like to talk about your employment contract.”
“All right.”
“We’d like to renegotiate it.”
I braced myself and stood very straight.
“Upward,” Alan said.
I blinked.
He smiled, a thin, dry, genuine smile. “The board voted unanimously. The Ohio Department of Health has called our response a model for the state. The American Hospital Association wants you to speak at its national conference. The Wall Street Journal has requested an interview.” He paused. “And on a personal note, in forty years of medicine, I have never seen a hospital executive carry a box of forms up three flights of stairs at four in the morning.”
I put a hand on the back of a chair to steady myself.
“It was just a box,” I said.
“It was the box,” said Alan Prewitt.
The new contract was five years. My salary went up considerably, with a performance bonus tied to patient safety measures, not to profit. Howard Brandt reviewed every page with me, and so did an outside employment lawyer I hired with my own money, a sharp woman named Celeste Moreau. She caught one clause about non-compete restrictions and had it rewritten.
“You’re the most valuable person in that building,” she told me. “Don’t sign anything that says otherwise.”
Executive compensation at nonprofit hospitals is public record. It gets reported to the IRS every year. In the spring, the Blade ran its annual list of the highest-paid hospital executives in northwest Ohio. My name was on it.
My mother called me at midnight, weeping.
“I’m sorry,” she said. “I’m so sorry. I didn’t know it was that much.”
“It’s all right, Mom.”
“Fifty dollars,” she whispered.
“I know.”
“I’ll never forgive myself.”
“Mom,” I said. “I’d like you to try.”
Laura Bennett writes about complicated family dynamics, difficult conversations, and the quiet moments that change everything. Her stories focus on real-life tensions — inheritance disputes, strained marriages, loyalty tests — and the strength people find when they finally speak up. She believes the smallest decisions often carry the biggest consequences.