Following a string of major cyberattacks on medtech companies, including Stryker and Intuitive Surgical earlier this year, MD+DI sat down with Vouched CEO Peter Horadan to unpack an overlooked vulnerability in healthcare cybersecurity: identity verification.
Horadan explains why outdated methods like photocopied IDs and security questions (some defeatable for as little as $2) leave telehealth platforms, device manufacturers, and health systems exposed to deepfakes, account takeovers, and synthetic identities.
"The way that we have been successful at defeating [deepfakes] is as simple as asking someone to show their ID. That is a complete defense against deepfakes."
Key takeaways from the interview:
- Deepfakes are accelerating — attackers can build a convincing voice and face print from just a few social media videos, then use it to impersonate patients or providers.
- Digital IDs are the fix — states like California (2M+ issued) and New York (1M+ issued) are already rolling out digital IDs that can't be counterfeited, with 30 states planning to follow. The EU has committed to supporting digital IDs across all member nations by the end of 2026.
- Account takeovers carry serious downstream risk — beyond fraud, they can trigger HIPAA violations, DEA scrutiny, and even "ghost employee" scenarios where uncredentialed individuals gain access to clinical systems and patient data for months before disappearing.
- Identity is the starting point for care, not an afterthought — without verifying who a patient is, providers risk merging records, delivering care based on the wrong medical history, or enabling insurance fraud.
Vouched works with telehealth leaders like hims, Willow, and LifeMD to bring real-time ID verification to remote care - defending against the same threats now hitting device manufacturers and health systems industry-wide.
Read the full interview to see why Horadan calls identity "the beginning of any person's journey with care."
Originally published on MD+DI. For full article, visit the source.