How Mt. San Rafael Hospital Transformed Cybersecurity Training to Combat AI-Powered Threats

As the Chief Information Officer at Mt. San Rafael Hospital, Michael Archuleta has seen it all. Over his two decades of nationally recognized IT leadership, he'd led a digital transformation and hardened the hospital's security posture, but the threat landscape was evolving faster than ever.

"As CIOs, our job isn't just protecting infrastructure. It's protecting people, their data, their trust, and their future. The thread landscape has changed to include AI-generated phishing emails, voice clones, and deepfakes. Our strategies must too."

Facing a New Era of Cyber Threats in Healthcare

Despite long-term investments in legacy phishing simulations and security awareness training, Archuleta recognized a growing gap: Traditional training programs weren't keeping up with the rise of generative AI and sophisticated social engineering.

"We do a great job training our users on phishing, but there's a new wave coming and the biggest risk remains the human element."

Adaptive Security: Built for the Modern Threat Landscape

Adaptive Security's potential to reshape security awareness training was immediately recognized. Adaptive offered a bold shift from static simulations to dynamic, AI-native training experiences designed to mirror real-world attacks.

Key features for Mt. San Rafael Hospital include:

• Deepfake Simulations: Personalized training using synthetic videos of real executives to simulate high-fidelity impersonation attacks.
• SMS & Voice Phishing Training: Interactive modules where users receive simulated smishing attacks and AI-cloned voice calls asking for urgent actions.
• AI Content Generator: Rapid deployment of new training modules tailored to current threat trends and organizational context.
• Behavioral Reporting: Real-time analytics showing which users failed specific AI-enabled simulations, from fake finance requests to urgent board meeting voice scams.

"Seeing a deepfake of myself in the training? That's when it clicked that this isn't hypothetical. It's real, and my users need to be ready."

Implementation and customization

With a seamless onboarding process, Adaptive integrated into Mt. San Rafael's environment, enabling:

• Segmented Training: Tailored content for clinical staff, finance, HR, and IT, each facing role-specific threats.
• Full Compliance Integration: HIPAA, safety, and internal policy modules rolled into a unified training platform.
• Customized Content: Even internal password policies and escalation protocols were embedded into the training experience.

"We weren't just checking boxes. This was about making training meaningful and personal."

Higher engagement, stronger readiness

Mt. San Rafael fully replaced its legacy solution with Adaptive, gaining not only modernized training but also expanded threat detection and response capabilities.

More importantly, users weren't just taking training; they were engaging with it.

"The staff really paid attention when they saw a deepfake video using my voice. Adaptive made cybersecurity personal, which is exactly what we needed."

Why It Matters

Healthcare organizations face the double burden of high-value targets and having legacy systems. Adaptive Security helps modernize one of the most vulnerable layers: the human firewall.

By embracing Adaptive's AI-first approach, Mt. San Rafael Hospital is leading the way in how healthcare institutions train and protect their staff, preparing not just for today's threats but also tomorrow's.