ARTICLE
17 July 2026

Health-e Law Episode 27 | Emerging Cybersecurity Threats In Healthcare With Erik Pupo (Podcast)

SM
Sheppard, Mullin, Richter & Hampton LLP

Contributor

Businesses turn to Sheppard to deliver sophisticated counsel to help clients move ahead. With more than 1,200 lawyers located in 16 offices worldwide, our client-centered approach is grounded in nearly a century of building enduring relationships on trust and collaboration. Our broad and diversified practices serve global clients—from startups to Fortune 500 companies—at every stage of the business cycle, including high-stakes litigation, complex transactions, sophisticated financings and regulatory issues. With leading edge technologies and innovation behind our team, we pride ourselves on being a strategic partner to our clients.
In this episode of Health-e Law, partner Sara Shanti and Erik Pupo from Guidehouse explore the critical intersection of healthcare data sharing and cybersecurity vulnerabilities. As healthcare systems embrace greater connectivity through initiatives like TEFCA, they face mounting cybersecurity challenges that demand proactive strategies and robust protection measures.
United States Food, Drugs, Healthcare, Life Sciences
Sara Helene Shanti’s articles from Sheppard, Mullin, Richter & Hampton LLP are most popular:
  • with readers working within the Insurance industries
Sheppard, Mullin, Richter & Hampton LLP are most popular:
  • within Cannabis & Hemp and Insolvency/Bankruptcy/Re-Structuring topic(s)

Welcome to Health-e Law, Sheppard’s podcast exploring the fascinating health tech topics and trends of the day. In this episode, partner and host Sara Shanti sits down with Erik Pupo, Director of Commercial Health IT at Guidehouse, to discuss how healthcare’s push toward greater connectivity and data sharing creates new cybersecurity risks, and what health systems need to do to stay ahead of emerging threats.

What we discuss in this episode:

  • The current cybersecurity landscape for hospitals and health systems
  • What TEFCA is and why it matters for healthcare data sharing
  • The core cybersecurity practices providers of all sizes should have in place
  • Cautionary tales from the field that emphasize the importance of maintaining a strong cybersecurity program

About Erik Pupo

Erik Pupo has spent more than 25 years advising healthcare organizations on technology, cybersecurity and business transformation. As Director of Commercial Health IT Advisory at Guidehouse, he helps healthcare organizations modernize their IT infrastructure as a principal strategist in cloud, security, data and AI.

Prior to joining Guidehouse, Erik served as Global Principal Practice Manager for Healthcare Cybersecurity at Amazon Web Services, helping health systems navigate the security challenges of moving critical infrastructure to the cloud. Before that, he served as Chief Information Officer at Columbia University Irving Medical Center, leading IT strategy and operations for one of the nation's most complex academic medical environments. 

Earlier in his career, Erik spent nearly a decade in global consulting, first as Senior Manager at Deloitte, where he led health IT initiatives for the Office of the National Coordinator for Health IT, the Department of Defense, and the Department of Veterans Affairs. He later served as Managing Director at Accenture, where he led strategic and technological transformation initiatives for providers, payers, and life sciences companies across North America.

About Sara Shanti

A partner in the Corporate practice group in Sheppard’s Chicago office, and co-lead of the firm’s Digital Health team, Sara Shanti’s practice sits at the forefront of healthcare technology by providing practical counsel on novel innovation and complex data privacy matters. Using her medical research background and HHS experience, Sara advises providers, payors, start-ups, technology companies, and their investors and stakeholders on digital healthcare and regulatory compliance matters, including artificial intelligence (AI), augmented and virtual reality (AR/VR), gamification, implantable and wearable devices, and telehealth.

At the cutting edge of advising on “data as an asset” programming, Sara’s practice also supports investment in innovation and access to care initiatives, including mergers and acquisitions involving crucial, high-stakes and sensitive data, medical and wellness devices, and web-based applications and care.

Thank you for listening! Don't forget to SUBSCRIBE to the show to receive new episodes delivered straight to your podcast player every month.

If you enjoyed this episode, please help us get the word out about this podcast. Rate and Review this show on Apple PodcastsAmazon Music, or Spotify. It helps other listeners find this show.

This podcast is for informational and educational purposes only. It is not to be construed as legal advice specific to your circumstances. If you need help with any legal matter, be sure to consult with an attorney regarding your specific needs.

1819194a.jpg

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

[View Source]

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More