<description>&lt;p&gt;&lt;strong style="background-color: transparent"&gt;February 24, 2026: &lt;/strong&gt;&lt;span style="background-color: transparent"&gt;When &lt;/span&gt;&lt;a href="https://www.linkedin.com/in/zacharylewis1/" target="_blank" style="background-color: transparent"&gt;Zach Lewis&lt;/a&gt;&lt;span style="background-color: transparent"&gt;, CISO and CIO at the &lt;/span&gt;&lt;a href="https://www.uhsp.edu/" target="_blank" style="background-color: transparent"&gt;University of Health Sciences and Pharmacy in St. Louis&lt;/a&gt;&lt;span style="background-color: transparent"&gt;, received that 3 AM call about system outages, his first thought was tech debt, not threat actors. What followed was a masterclass in ransomware response that he's now captured in his new book "Locked Up." Despite A-minus security scores, board briefings, FBI connections, and all the right frameworks in place, LockBit still found its way in through a configuration gap during a firewall migration. In this raw conversation, Zach reveals why the negotiation process saved them $1.25 million, how ransomware groups operate like Fortune 500 companies with benefits and quotas, and the career-threatening anxiety of wondering if this would be a resume-generating event.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;strong style="background-color: transparent"&gt;Key Points:&lt;/strong&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;span style="background-color: transparent"&gt;00:44 Discussing 'Locked Up'&lt;/span&gt;&lt;/li&gt;&lt;li&gt;&lt;span style="background-color: transparent"&gt;05:37 Initial Response and Realization of Ransomware Attack&lt;/span&gt;&lt;/li&gt;&lt;li&gt;&lt;span style="background-color: transparent"&gt;16:05 Decision-Making and Negotiations with LockBit&lt;/span&gt;&lt;/li&gt;&lt;li&gt;&lt;span style="background-color: transparent"&gt;18:45 Understanding the Ransomware Ecosystem&lt;/span&gt;&lt;/li&gt;&lt;li&gt;&lt;span style="background-color: transparent"&gt;24:01 Lessons Learned and Strengthening Cybersecurity&lt;/span&gt;&lt;/li&gt;&lt;/ul&gt;&lt;br/&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent"&gt;Golf Tournament Registration:&amp;nbsp; &lt;/span&gt;&lt;a href="https://carahevents.carahsoft.com/Event/Details/686801-ThisWeekHealth" target="_blank" style="background-color: transparent"&gt;https://carahevents.carahsoft.com/Event/Details/686801-ThisWeekHealth&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent"&gt;X&lt;/span&gt;&lt;a href="https://twitter.com/thisweekhealth" target="_blank" style="background-color: transparent"&gt;: This Week Health&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://www.linkedin.com/company/ThisWeekHealth" target="_blank" style="background-color: transparent"&gt;LinkedIn: This Week Health&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://www.alexslemonade.org/mypage/3173454" target="_blank" style="background-color: transparent"&gt;Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer&lt;/a&gt;&lt;/p&gt;</description>

UnHack with Drex DeFord

This Week Health

UnHack the Podcast: Inside a Real LockBit Attack - Lessons From Fighting Ransomware with Zach Lewis

FEB 24, 202627 MIN
UnHack with Drex DeFord

UnHack the Podcast: Inside a Real LockBit Attack - Lessons From Fighting Ransomware with Zach Lewis

FEB 24, 202627 MIN

Description

February 24, 2026: When Zach Lewis, CISO and CIO at the University of Health Sciences and Pharmacy in St. Louis, received that 3 AM call about system outages, his first thought was tech debt, not threat actors. What followed was a masterclass in ransomware response that he's now captured in his new book "Locked Up." Despite A-minus security scores, board briefings, FBI connections, and all the right frameworks in place, LockBit still found its way in through a configuration gap during a firewall migration. In this raw conversation, Zach reveals why the negotiation process saved them $1.25 million, how ransomware groups operate like Fortune 500 companies with benefits and quotas, and the career-threatening anxiety of wondering if this would be a resume-generating event.Key Points:00:44 Discussing 'Locked Up'05:37 Initial Response and Realization of Ransomware Attack16:05 Decision-Making and Negotiations with LockBit18:45 Understanding the Ransomware Ecosystem24:01 Lessons Learned and Strengthening CybersecurityGolf Tournament Registration:  https://carahevents.carahsoft.com/Event/Details/686801-ThisWeekHealthX: This Week HealthLinkedIn: This Week HealthDonate: Alex’s Lemonade Stand: Foundation for Childhood Cancer