Article
The Change Healthcare outage: what one missing login step cost
The 2024 Change Healthcare attack showed how a single missing security step can disrupt an entire industry for weeks.
- PROTECT
6 min ·
INDUSTRY / SENIOR LIVING
An empty room doesn't rent itself. Neither does trust.
Families call about a parent late at night, on weekends, between shifts at their own jobs. If nobody answers, they call the next community on their list, and a room stays empty another month. Cyber6 helps you respond to every inquiry, protect resident information, and keep residents and their families safer from scams.
AUTOMATEPROTECTEMPOWER
5 min read
senior living front desk with a phone ringing after hours and a tour schedule on screen
Example
After-hours inquiry
- 8:40 PMLooking at assisted living for my mother. Do you have openings?
- 8:41 PMThanks for reaching out. We'd like to set up a tour this week.
- 8:52 PMSaturday morning works for us.
- 8:53 PMTour booked · Saturday 10:00 AM
WE GET IT
We know what your week looks like
- 01
The call comes in after hours
An adult child researches communities at 9 PM after putting their kids to bed. If nobody responds until Monday, they've already toured two other places.
- 02
Tours get booked too late
By the time your admissions coordinator returns a voicemail, the family has narrowed their list to communities that called back the same day.
- 03
Move-in paperwork stalls
Medical forms, contracts, and payment authorization pass back and forth by email and fax. A missing signature can delay a move-in by a week.
- 04
Occupancy is a guess until month end
Nobody can say today how many units will be empty next month, so marketing spend and staffing decisions lag behind reality.
- 05
Staff turnover resets the relationship
A new caregiver doesn't know a resident's routine or a family's preferences, and residents notice the change.
- 06
Resident and guest Wi-Fi share the network
Family members and residents stream video on the same network that runs your billing and care systems, with no real separation between them.
- 07
Scam calls target residents directly
A resident gets a call claiming to be a grandchild in trouble, asking for money by gift card or wire, and staff hear about it only after the fact.
- 08
Family updates are inconsistent
Some families hear from staff often, others go weeks without an update, and the difference has nothing to do with how their loved one is doing.
THE IMPACT
What it's costing you
Rooms that sit empty
Every unit that stays vacant another month is revenue you don't get back, no matter how good your care is once someone moves in.
Marketing spent on inquiries nobody answers
Paying for ads and referrals only to lose the family to a slower follow-up wastes the spend and the goodwill.
Staff time on paperwork instead of residents
Hours spent chasing signatures and re-entering forms are hours not spent with the people already living in your community.
Financial harm to residents
A resident who wires money to a scammer can lose savings that took a lifetime to build, and the community bears the reputational fallout.
Exposure from a mixed network
If guest devices and business systems share a network, a compromised laptop in a resident's room is a way into billing and health records.
COMPLIANCE
Rules you have to follow
HIPAA (where health services are provided)
- What it is
- The federal law protecting health information, which applies when your community provides skilled nursing, memory care, or other health services.
- Who it applies to
- Communities that deliver health care services and bill for them, directly or through a partner.
- What it expects of you
- Safeguards for health records, staff training, and breach notification if something goes wrong.
- How Cyber6 helps
- We run a risk assessment scoped to the health services you provide and put the right safeguards around resident records.
State residential care licensing (for example California Title 22)
- What it is
- State rules governing how residential and assisted living communities operate, including recordkeeping and reporting.
- Who it applies to
- Licensed residential and assisted living communities.
- What it expects of you
- Accurate resident records, incident reporting, and documented policies your state inspects against.
- How Cyber6 helps
- We help you keep records secure and available for inspection, and document your IT and data policies. [OWNER: confirm which state licensing frameworks apply to the communities Cyber6 serves.]
Elder financial abuse awareness
- What it is
- Not a single law, but a set of state reporting duties and best practices around protecting residents from financial exploitation.
- Who it applies to
- Any community serving older adults.
- What it expects of you
- Staff who can recognize signs of scams and financial abuse and know how to report concerns.
- How Cyber6 helps
- We run scam-awareness training for staff and offer sessions families can join.
This is general information, not legal advice.
THE FIX
How Cyber6 helps
AUTOMATE
Fill the gaps automatically
- Get found
The right customers find you on Google, AI search, and social, in your own voice.
- Get customers
Every call, text, form, and quote turns into booked work.
Inquiry-to-tour follow-up
Every inquiry gets a same-day response with an easy way to book a tour, day or night.
- Serve customers
Customers hear from you at the right time, without your team chasing them.
Family communication updates
Scheduled updates go out to families on a rhythm you set, with an easy way to ask a question or request a call.
- Get paid
Money you've already earned comes in sooner, without awkward phone calls.
- Run the business
Less retyping and waiting, more time for the work that matters.
Occupancy forecasting
A running view of expected move-ins, move-outs, and open units, updated as things change.
PROTECT
Protect what you're trusted with
- 01
Separate networks for residents, guests, and the business
Resident and guest Wi-Fi run on their own network, fully separated from billing, care records, and staff systems.
What this means for you: A compromised guest device can't reach resident health or payment information.
- 02
Protection for resident health records
Access controls and around the systems that hold health information, scoped to where you provide health services.
What this means for you: Fewer people can see records than need to, and the ones who can are protected.
- 03
Individual logins with a second step
Staff get their own logins with instead of a shared front-desk password, across the practice management, billing, and care documentation systems your community uses every day.
What this means for you: You can see who accessed what, and a stolen password isn't enough to get in.
- 04
Backups kept separate and tested
Resident records, billing, and care plans are backed up off your network and tested to confirm they restore.
What this means for you: A ransomware attack or hardware failure doesn't mean losing resident histories.
EMPOWER
Train the people doing the work
Residents and the families who visit them
Scam-awareness workshops for residents and families
Plain sessions on the grandparent scam, fake tech support calls, and gift-card payment requests, with simple habits that stop money from moving.
Front desk, admissions, and care staff
Staff training on phishing and privacy
Recognizing phishing emails, protecting resident information, and knowing what to report and to whom.
A DAY WITH CYBER6
A day in your community with Cyber6
8:10 AMAUTOMATE
An inquiry that came in at 9 PM last night already has a tour booked for Thursday.
11:00 AMEMPOWER
A resident mentions a call asking for gift cards to help a grandchild. Staff recognize it from training and reassure the family.
2:30 PMAUTOMATE
The admissions team gets a short list of families who toured last week and haven't decided, to follow up personally.
4:45 PMPROTECT
A laptop on the guest network shows signs of malware. It's isolated automatically and never touches resident records.
YOUR TOOLS
Systems we commonly see
- PointClickCare
- Yardi Senior Living
- Welcome Home
- Sherpa
We work alongside the systems you already use. We'll confirm what connects during your assessment.
QUESTIONS
Questions from senior living
Responses are written in your community's voice, and any reply routes to a real person on your team.
We work alongside the major platforms and confirm exactly what connects during the assessment.
Yes. That separation is one of the first things we set up, so a guest device is never a path into billing or health records.
It depends on what health services you provide and bill for. We scope the assessment to your actual services.
Yes. We run workshops residents and families can attend, and train staff to recognize and report attempts.
Yes. We can work alongside them or take over fully, and we'll coordinate so nothing falls between the cracks.
Nothing. It's a free review of your inquiry response and your network, with a written summary of what to fix first.
RESOURCES
Learn more
ArticleA HIPAA compliance checklist for small practices
Protecting patient health information requires more than just a locked door. Use this HIPAA compliance checklist to audit your physical, technical, and administrative safeguards.
- PROTECT
6 min ·
ArticleVishing: phone scams that trick staff into giving access
Vishing, or voice phishing, uses phone calls and social engineering to manipulate employees into sharing confidential information or granting remote access.
- PROTECT
6 min ·
WHO WE'VE WORKED WITH
- A statewide cybersecurity assessment program
- Credit unions
- A water and wastewater utility
- Housing organizations
- Nonprofits and churches
- Small businesses
- A health and wellness startup
Every result is measured against your own starting point.
How we prove it →PART OF ONE PARTNER
One partner for all three.
Protect · IT & Cybersecurity
IT and cybersecurity, managed around the clock.
You're here
Empower · Training for Businesses & Individuals
Training that builds skills for your team and your career.
Explore Empower
WHY CYBER6
Why businesses choose Cyber6.
One partner, not three vendors
The people automating your work also run and protect your IT and train your team, so nothing falls between companies.
Plain language and real people
You talk to people who explain things clearly, answer the phone, and tell you what they'd do in your place.
Measured against your own numbers
We record where you start before anything changes, then report results against that baseline.
Marquis Carroll, Founder & CEO. Marquis has spent years doing hands-on IT and security work through his own business, and runs a mentorship program that has helped people start careers in tech.
Our storyGETTING STARTED
Four steps from first call to results.
Explore
A relaxed 30-minute conversation about how your business runs and what's getting in the way. No cost, no pressure.
You get: honest answers on whether we can help.
Assess
We look at your systems, security, manual work, and training needs, and record your starting numbers.
You get: a plain-English picture of your risks and opportunities.
Set up
A prioritized plan and proposal, then a kickoff that introduces your team and sets up access safely.
You get: a shared timeline and who to call for what.
Enable
We roll out in phases, train your team, and walk you through your first results.
You get: your first plain-English report, measured with PROVE.
Let's look at your community together.
A 30-minute call. No cost, no pressure, and honest answers.