Dr. Benoit Desjardins, a cardiovascular radiologist and cybersecurity expert, bridges medicine, artificial intelligence, and digital security to protect health-care systems from growing cyber threats. PHOTO SUPPLIED <\/p>\n
When Dr. Benoit Desjardins attended DEF CON with his teenage son in 2017, he\u00a0didn\u2019t\u00a0expect a line of 500 people outside a small session on health\u00a0care cybersecurity. The radiologist, professor and AI researcher\u00a0was\u00a0stunned.\u00a0\u00a0<\/p>\n
\u201cThat\u2019s when I realized\u00a0the intersection of medicine and cybersecurity was about to explode, and very few people in health\u00a0care had the skills to deal with it,\u201d he says.\u00a0<\/p>\n
Desjardins, cardiovascular radiologist at the University of Montreal, former professor at the University of Pennsylvania and Chief Medical Information Officer in his department, is\u00a0today\u00a0among the rare experts fluent in three languages that seldom coexist: medicine, artificial\u00a0intelligence\u00a0and cybersecurity.\u00a0\u00a0<\/p>\n
His career reads like the plot of a techno-thriller, early hacker turned doctor turned security evangelist, but his message is grounded and urgent:\u00a0health care\u00a0is now one of the most attractive targets in cyberspace, and the systems that sustain human life are dangerously exposed.\u00a0<\/p>\n
Before he ever held a stethoscope, Desjardins held a modem.\u00a0\u00a0<\/p>\n
\u201cI was an ethical hacker 15 years before they coined the term,\u201d he laughs.\u00a0\u00a0<\/p>\n
Long before cybersecurity was a profession, he spent nights exploring computer systems, fascinated by how things broke\u00a0and how they could be fixed.\u00a0\u00a0<\/p>\n
That curiosity never left.\u00a0<\/p>\n
Two decades later, after\u00a0establishing\u00a0himself as a world-class cardiovascular imaging specialist, he returned to the\u00a0hacker\u2019s\u00a0world.\u00a0\u00a0<\/p>\n
The WannaCry and\u00a0NotPetya\u00a0ransomware outbreaks had paralyzed hospitals across Europe and the United States, encrypting patient files, halting\u00a0surgeries\u00a0and endangering lives.\u00a0\u00a0<\/p>\n
\u201cI saw the same vulnerability in medicine that I used to see\u00a0in\u00a0unpatched servers,\u201d he recalls. \u201cHospitals\u00a0had\u00a0become digital organisms. We were protecting hearts and brains but leaving the nervous system, the data,\u00a0unsecured.\u201d\u00a0<\/p>\n
Re-immersing himself in code, he refreshed his technical chops with certifications,\u00a0conferences\u00a0and hands-on exercises.\u00a0\u00a0<\/p>\n
At Penn University, he trained the cybersecurity team with live hacking drills, even\u00a0demonstrating\u00a0how malicious code could hide inside medical image files.\u00a0\u00a0<\/p>\n
\u201cI inserted PHP into a\u00a0DICOM\u00a0(digital imaging and communications in medicine)\u00a0header,\u201d he explains. \u201cIt executed remote code, proof that our imaging systems could be weaponized.\u201d\u00a0<\/p>\n
Desjardins\u2019 dual perspective, Canadian physician\u00a0and\u00a0U.S. researcher, gives him a rare vantage point on how different systems respond to cyberattacks.\u00a0\u00a0<\/p>\n
\u201cThe U.S. model\u00a0is broken,\u201d he says bluntly.\u00a0<\/p>\n
In the United States, hospitals hit by ransomware are often treated as negligent culprits. Regulators fine them for HIPAA\u00a0violations,\u00a0lawyers file class-action suits and insurance rarely\u00a0covers\u00a0the fallout.\u00a0\u00a0<\/p>\n
\u201cA hospital can pay\u00a0$10\u00a0million in ransom or\u00a0$100\u00a0million in penalties,\u201d he says. \u201cGuess which they choose?\u00a0That\u2019s\u00a0how we end up funding cybercrime.\u201d\u00a0<\/p>\n
Canada, in contrast, favors collaboration over condemnation. Provincial and federal agencies share tools,\u00a0expertise\u00a0and rapid-response teams with\u00a0health-care\u00a0networks. \u201cIn Quebec, if a hospital is hit, the government steps in,\u201d he explains. \u201cThe goal is to restore care, not ruin the institution.\u201d\u00a0<\/p>\n
That difference\u00a0isn\u2019t\u00a0philosophical;\u00a0it\u2019s\u00a0existential. In the U.S., two major hospital cyberattacks occur\u00a0every day, leaking\u00a0roughly 750,000\u00a0medical records daily, more than 600 million to date. Entire practices have collapsed under the costs.\u00a0\u00a0<\/p>\n
\u201cYou can\u2019t ask a hospital to be more secure than the Pentagon,\u201d Desjardins argues. \u201cIt\u2019s\u00a0irrational. Security\u00a0has to\u00a0be a shared public service, not an individual burden.\u201d\u00a0<\/p>\n
He worries that Canada could drift toward the U.S. punitive model. A recent $480 million lawsuit against Ontario hospitals, he warns, \u201cis a dangerous precedent. If we turn victims into villains,\u00a0we\u2019ll\u00a0bankrupt the system.\u201d\u00a0<\/p>\n
Desjardins\u2019 research zeroes in on one of medicine\u2019s most overlooked weak points: imaging. Every X-ray, CT\u00a0scan\u00a0and MRI\u00a0travels\u00a0in\u00a0DICOM\u00a0format, a standard that predates modern security protocols.\u00a0His \u201cblue\u00a0ribbon\u201d team, composed of DICOM architects and hackers, mapped every vulnerability in the\u00a0format\u00a0and published the definitive analysis in radiology literature.\u00a0<\/p>\n
Their findings rippled across the industry,\u00a0leading to\u00a0webinars,\u00a0interviews\u00a0and his appointment as cybersecurity lead for the Radiological Society of North America (RSNA), the world\u2019s largest imaging conference.\u00a0\u00a0<\/p>\n
\u201cWe bring in top people from\u00a0government\u00a0and industry,\u201d he says. \u201cOur goal is to make cybersecurity part of radiology\u2019s DNA, not an afterthought.\u201d\u00a0<\/p>\n
At Sant\u00e9 Qu\u00e9bec, he now helps implement a province-wide\u00a0picture archiving and communication system,\u00a0essentially the\u00a0brain of medical imaging, built with security from the ground up.\u00a0\u00a0<\/p>\n
\u201cIt\u2019s not glamorous work,\u201d he admits, \u201cbut\u00a0it\u2019s\u00a0the digital circulatory system of health\u00a0care. If it fails, the patient\u00a0can\u2019t\u00a0be diagnosed.\u201d\u00a0<\/p>\n
Despite the urgency, there is still no formal pathway for clinicians who want to specialize in cybersecurity.\u00a0\u00a0<\/p>\n
\u201cIn radiology, we have fellowships in AI. In cybersecurity, nothing,\u201d Desjardins notes. \u201cMost of us came here by accident, doctors who code, hackers who care about patients.\u201d\u00a0<\/p>\n
He advocates for new interdisciplinary programs linking medical schools with computer-science departments and security institutes. \u201cWe need cyber physicians,\u201d he insists. \u201cPeople who understand both the anatomy of the human body and the anatomy of a network.\u201d\u00a0<\/p>\n
For all his credentials, Desjardins is wary of stagnation. To avoid burnout, he sets himself a \u201cgrand\u00a0challenge\u201d every five years, a dive\u00a0into an entirely new field. Past missions include earning a black belt in Aikido, leading Boy Scouts, mastering marksmanship and training as a pilot (an endeavor he ended after his instructor\u2019s fatal crash). His current challenge? Competitive drone racing.\u00a0<\/p>\n
\u201cEvery challenge resets my brain,\u201d he says. \u201cIt reminds me how it feels to be a beginner, to fail fast, to learn again.\u201d\u00a0\u00a0<\/p>\n
That humility, he believes, is vital in cybersecurity, where the landscape mutates faster than any human can keep up. He stays sharp by competing in hacking contests like the NSA Codebreaker Challenge, where he ranked in the top two per cent of 5,000 participants. \u00a0<\/p>\n
\u201cYou can\u2019t just read about threats,\u201d he says. \u201cYou have to touch them.\u201d\u00a0<\/p>\n
For all his talk of exploits and systems, Desjardins returns again and again to the human side of cybersecurity.\u00a0\u00a0<\/p>\n
\u201cIn medicine, we talk about patient safety,\u201d he says. \u201cCybersecurity\u00a0is\u00a0patient safety. When a hospital shuts down,\u00a0it\u2019s\u00a0not about data,\u00a0it\u2019s\u00a0about delayed diagnoses, canceled surgeries, lost lives.\u201d\u00a0<\/p>\n
He tells the story of a radiology practice in North Carolina that closed forever after a ransomware attack. \u201cFifty years of work\u00a0gone\u00a0overnight,\u201d he says quietly. \u201cThat\u2019s not just an IT problem; that\u2019s a human tragedy.\u201d\u00a0<\/p>\n
Still, he\u00a0remains\u00a0hopeful. He believes Canada\u2019s collaborative model, if preserved and strengthened, could become a template for the world.\u00a0\u00a0<\/p>\n
\u201cWe have an opportunity to lead with compassion and logic,\u201d he says. \u201cWe can protect both data and dignity.\u201d\u00a0\u00a0<\/p>\n
As he leaves his office for another day split between hospital wards and digital defenses, Desjardins embodies the future he envisions: a generation of physicians who heal not only bodies but also the systems that keep them alive.\u00a0<\/p>\n
You can connect with\u00a0Desjardins\u00a0here<\/a>.\u00a0<\/p>\n \u00a0<\/p>\n RDX-Leaderboard <\/p>\n