Table of Contents
UC San Diego researchers have developed Project CRASHCART, a mobile backup computing system designed to restore essential IT functions at hospitals hit by cyberattacks, introducing a van-based solution capable of bringing patient records, communication networks and clinical workflows back online for a 20-bed emergency department, marking a significant step in Project CRASHCART mobile hospital IT resilience research.
Who Is Behind Project CRASHCART Mobile Hospital IT
The project comes from the UC San Diego Center for Healthcare Cybersecurity, co-directed by Jeff Tully, MD, a clinical associate professor of anesthesiology, and Christian Dameff, MD, an associate professor of emergency medicine, biomedical informatics and computer science. “We’re seeing more and more cyberattacks on critical hospital infrastructure,” Dr. Dameff said in an Aug. 19 UC San Diego article.
Why This Threat Backdrop Motivated the Project
The growing frequency of cyberattacks on hospital infrastructure that Dameff described provided the underlying motivation for developing a physical, network-independent backup system, one designed to restore hospital operations even when a facility’s own internal IT infrastructure has been fully compromised by ransomware or other attacks.
How Project CRASHCART Mobile Hospital IT Was Tested
The team tested the system at El Centro (Calif.) Regional Medical Center, a level 4 trauma center and one of only two acute care hospitals in the county. Andrew LaFree, MD, chief of staff at El Centro Regional Medical Center, said in the article that the system “worked at a pretty high level” and addressed the hospital’s connectivity gaps.
Why This Rural Testing Site Was Significant
Testing at a level 4 trauma center that represents one of only two acute care hospitals serving its county underscores the real-world stakes of this technology, since a cyberattack disabling either of El Centro’s two hospitals would leave the surrounding community with severely limited emergency care access.
The Technology Behind Project CRASHCART Mobile Hospital IT
Project CRASHCART uses satellite and cellular links to create a private 5G network inside a hospital, bypassing compromised internal systems. This network-bypass approach is central to the system’s design: rather than attempting to repair or work around a hospital’s existing compromised infrastructure, CRASHCART establishes an entirely independent communications layer that doesn’t depend on any of the potentially compromised systems already in place.
Federal Backing for This Research
The team also demonstrated the technology for the Advanced Research Projects Agency for Health, which funds the Healthcare Ransomware Resiliency and Response Program that supports the project. This federal funding connection signals that Project CRASHCART fits within a broader government initiative specifically focused on building ransomware resilience across the healthcare sector.
Why Rural Hospitals Face Outsized Risk Within This Project CRASHCART Mobile Hospital IT Context
Rural and critical access hospitals face outsized cyberattack risk due to limited IT resources, according to Dr. Tully. UC San Diego’s work signals a growing federal push to build physical backup infrastructure, not just software defenses, into hospital cybersecurity strategy.
Why Physical Backup Infrastructure Represents a Shift in Approach
This emphasis on physical, hardware-based backup infrastructure rather than purely software-based defenses reflects a notable evolution in hospital cybersecurity strategy, acknowledging that software protections alone may be insufficient once an attacker has already compromised a hospital’s primary systems, making a genuinely independent restoration pathway essential.
What This Project CRASHCART Mobile Hospital IT System Means Going Forward
With successful testing completed at El Centro Regional Medical Center and ARPA-H funding already in place through the Healthcare Ransomware Resiliency and Response Program, this mobile backup system offers a concrete model for how rural and critical access hospitals with limited IT resources could gain access to enterprise-grade cyberattack resilience without needing to build and maintain such infrastructure independently. Given Dr. Tully’s specific identification of rural hospitals as facing outsized cyberattack risk, this technology could prove particularly valuable for smaller facilities that would otherwise lack the resources to develop comparable backup capabilities on their own.
What to Watch Going Forward
As Project CRASHCART moves beyond its initial testing phase, industry observers will likely watch whether ARPA-H expands funding to deploy similar mobile backup units to additional rural and critical access hospitals nationwide, particularly given the documented rise in healthcare cyberattacks. Given this system’s demonstrated ability to restore a 20-bed emergency department’s core IT functions, this Project CRASHCART mobile hospital IT research may represent an early model for a broader shift toward physical, hardware-based cyberattack resilience infrastructure across the healthcare sector, complementing rather than replacing existing software-based cybersecurity defenses.
For more healthcare industry updates, insights and news, visit DistilINFO. Click here to subscribe to stay informed.
