UnderDefense MDR: how a German healthcare leader defeated a wave of cyberattacks
A leading German healthcare organization was facing thousands of cyberattacks every week—without the ability to quickly expand its internal IT team. Rather than risking patient data security, the organization adopted the MDR model. Within just a few months, it stopped real incidents, restored control over thousands of alerts, and enabled specialists to focus on what truly matters.
The Client
The client is the largest and oldest healthcare organization in Germany, encompassing more than 100 different centers, institutes, and departments. It provides a wide range of medical services supported by modern equipment and highly qualified staff. The institution is consistently ranked among the top hospitals in Germany and worldwide.
The Challenge
Cyberattacks on healthcare organizations are increasing at an alarming rate—averaging over 1,400 attacks per week in 2022 against hospitals and medical facilities.
Although the client had an internal IT security team of more than 100 engineers, it still faced major challenges:
As a result, various types of malware could easily penetrate the infrastructure and disrupt critical business operations.
The Solution: UnderDefense
Recognizing that it was not feasible to quickly expand its internal team, the client sought an external cybersecurity expert and selected UnderDefense MDR, which provides:
24/7 monitoring and a dedicated SOC (Security Operations Center) staffed with experienced engineers
Professional EDR tuning (Fortinet/EnSilo) to reduce false positives and automate incident detection
Threat monitoring and analysis across more than 20,000 endpoints
Support in meeting European regulatory requirements for patient data protection
During the first year of cooperation, the UnderDefense team analyzed vast volumes of data, eliminated tens of thousands of false alerts, and notified the client of numerous real attacks.
Results
15 serious incidents were stopped before causing damage
The client gained full visibility across 25,000 endpoints and the entire IT environment
Over 30,000 alerts were reviewed and resolved, significantly reducing team overload
Alert fatigue was substantially reduced, allowing internal engineers to focus on strategic initiatives
Threat readiness, incident reporting, and forensic analysis were significantly improved
Impact of the partnership
UnderDefense
UnderDefense is a global cybersecurity company that helps organizations build resilient defenses against modern digital threats. By combining expert knowledge, innovative technologies, and in-depth risk analysis, UnderDefense delivers a full lifecycle of services—from preventive measures to 24/7 monitoring and incident response.
Schedule a demo and learn more
To schedule individual demonstrations, partner training sessions, or pilot projects, please contact the Business Development Manager at Oberig IT – Krystian Hofman.