{{short description|American medical cybersecurity researcher}} {{Infobox scientist | name = Jeff Tully | birth_name = | honorific_suffix = | image = | image_size = | caption = | birth_date = | birth_place = | death_date = | death_place = | residence = | nationality = | field = {{Plainlist| * Cybersecurity * Medicine}} | work_institution = {{Plainlist| * University of California-San Diego School of Medicine * UCSD Center for Healthcare Cybersecurity * Healthcare Ransomware Resiliency and Response Program}} | education = | alma_mater = University of Arizona College of Medicine – Phoenix | doctoral_advisor = | thesis_title = | thesis_url = | thesis_year = | awards = | doctoral_students = | known_for = {{Plainlist| * Medical infrastructure security * Medical device security}} | website = | spouse = | children = }}
'''Jeff Tully''' is a medical cybersecurity researcher whose works have been published in JAMA Internal Medicine, JAMA Network Open, The Journal of Emergency Medicine, the Journal of the American College of Cardiology and the Journal of Medical Internet Research, among others.<ref>{{Cite journal |last1=Dameff |first1=Christian |last2=Tully |first2=Jeffrey |last3=Chan |first3=Theodore C. |last4=Castillo |first4=Edward M. |last5=Savage |first5=Stefan |last6=Maysent |first6=Patricia |last7=Hemmen |first7=Thomas M. |last8=Clay |first8=Brian J. |last9=Longhurst |first9=Christopher A. |date=2023-05-08 |title=Ransomware Attack Associated With Disruptions at Adjacent Emergency Departments in the US |journal=JAMA Network Open |volume=6 |issue=5 |pages=e2312270 |doi=10.1001/jamanetworkopen.2023.12270 |pmid=37155166 |pmc=10167570 |issn=2574-3805}}</ref><ref>{{Cite journal |last1=Goebel |first1=Mat |last2=Dameff |first2=Christian |last3=Tully |first3=Jeffrey |date=2019-07-09 |title=Hacking 9-1-1: Infrastructure Vulnerabilities and Attack Vectors |journal=Journal of Medical Internet Research |volume=21 |issue=7 |article-number=e14383 |doi=10.2196/14383 |doi-access=free |issn=1438-8871 |pmc=6647750 |pmid=31290401}}</ref><ref name="jamanetwork.com">{{Cite journal |last1=Neprash |first1=Hannah T. |last2=Dameff |first2=Christian |last3=Tully |first3=Jeffrey |date=2024-11-01 |title=Cybersecurity Lessons From the Change Healthcare Attack |url=https://jamanetwork.com/journals/jamainternalmedicine/fullarticle/2823421 |journal=JAMA Internal Medicine |language=en |volume=184 |issue=11 |pages=1283–1284 |doi=10.1001/jamainternmed.2024.3162 |pmid=39250110 |issn=2168-6106|url-access=subscription }}</ref> He has spoken internationally about these topics at conferences like DEF CON, the RSA Conference and DerbyCon.<ref name=":0">{{Cite web |title=Hacking humans: Building a better you |url=https://www.cnet.com/culture/hacking-humans-building-a-better-you/ |access-date=2025-01-22 |website=CNET |language=en}}</ref><ref>{{Cite magazine |last=Zetter |first=Kim |title=How Hackers Could Mess With 911 Systems and Put You at Risk |url=https://www.wired.com/2014/08/how-hackers-could-mess-with-911/ |access-date=2025-01-22 |magazine=Wired |language=en-US |issn=1059-1028}}</ref><ref>{{Cite web |last=Thomson |first=Iaian |date=September 26, 2017 |title=Docs ran a simulation of what would happen if really nasty malware hit a city's hospitals |url=https://www.theregister.com/2017/09/26/malware_hospital_simulation/m |access-date=January 22, 2025}}</ref><ref>{{Cite web |last=Barth |first=Bradley |date=2020-09-23 |title=Lessons from the ransomware death: Prioritize cyber emergency preparedness |url=https://www.scworld.com/news/lessons-from-the-ransomware-death-cyber-emergency-preparedness-critical |access-date=2025-01-22 |website=SC Media |language=en}}</ref><ref name=":1">{{Cite web |last=Innes |first=Stephanie |title=Can medical devices be hacked? Arizona doctors prepare for possibility of cyberattacks |url=https://www.azcentral.com/story/news/local/arizona-health/2018/12/27/ethical-hackers-warn-physicians-cyberattacks-christian-dameff-arizona-college-medicine-jeff-tully/2277625002/ |access-date=2025-01-22 |website=The Arizona Republic |language=en-US}}</ref> He is also co-director of The UCSD Center for Healthcare Cybersecurity at the University of California-San Diego and co-principal investigator of the Healthcare Ransomware Resiliency and Response Program (H-R3P).<ref name=":2">{{Cite news |last=Ribeiro |first=Anna |date=2023-10-04 |title=HHS' ARPA-H awards $50 million in funding for six research contracts to advance health data security |url=https://industrialcyber.co/news/hhs-arpa-h-awards-50-million-in-funding-for-six-research-contracts-to-advance-health-data-security/ |archive-url=https://web.archive.org/web/20240816033356/https://industrialcyber.co/news/hhs-arpa-h-awards-50-million-in-funding-for-six-research-contracts-to-advance-health-data-security/ |archive-date=2024-08-16 |access-date=2025-01-22 |work=Industrial Cyber |language=en-US |url-status=live }}</ref><ref name=":5" /> Tully is also a board-certified anaesthesiologist and pediatrician, as well as an associate clinical professor at the University of California-San Diego.<ref>{{Cite web |title=Verification of Certification {{!}} The American Board of Pediatrics |url=https://www.abp.org/verification-certification |access-date=2025-01-22 |website=www.abp.org}}</ref><ref name=":3">{{Cite web |title=Jeffrey Tully {{!}} UCSD Profiles |url=https://profiles.ucsd.edu/jeffrey.tully |access-date=2025-01-22 |website=profiles.ucsd.edu}}</ref>
==Early life and career== While attending the University of Arizona College of Medicine – Phoenix, Tully showed an interest in biohacking, presenting at DEF CON 20 in 2013.<ref name=":0" /> Tully graduated and specialized in anesthesiology and pediatrics.<ref name=":1" />
Following the WannaCry ransomware attacks in 2017, Tully shifted his attention to improving the cybersecurity of emergency medical services, hospitals, critical medical infrastructure, and medical devices. He organized the CyberMed Summit, a medical cybersecurity conference. The CyberMed Summit offered practical, hands-on clinical simulations of cybersecurity breaches in hospital environments and included medical professionals, cybersecurity experts, law-enforcement officials, policymakers and hackers.<ref>{{Cite web |last=Stanford |first=Julianne |title=Hacking a heart pacemaker isn't science fiction. See what experts are doing to prevent it |url=https://www.azcentral.com/story/news/local/phoenix/2017/06/12/hacking-pacemaker-isnt-science-fiction-movie-plotline-but-reality/378176001/ |access-date=2025-01-22 |website=The Arizona Republic |language=en-US}}</ref><ref>{{Cite web |last= |first= |title=Video Fears of hackers targeting hospitals, medical devices |url=https://abcnews.go.com/Nightline/video/fears-hackers-targeting-hospitals-medical-devices-48343190 |access-date=2025-01-22 |website=ABC News |language=en}}</ref><ref>{{Cite web |date=2017-06-16 |title=Now doctors need to be hackers, too |url=https://www.engadget.com/2017-06-16-now-doctors-need-to-be-hackers-too.html |access-date=2025-01-22 |website=Engadget |language=en-US}}</ref> During the COVID-19 pandemic, Tully brought attention to the security issues of telemedicine and the increased possibility of cyberattacks.<ref>{{Cite web |last=Drees |first=Jackie |date=2020-05-06 |title=COVID-19 cyber threats: Why data integrity is crucial & how to protect it |url=https://www.beckershospitalreview.com/cybersecurity/covid-19-cyber-threats-why-data-integrity-is-crucial-how-to-protect-it.html |access-date=2025-01-22 |website=www.beckershospitalreview.com |language=en-gb}}</ref>
Tully advocates securing access to hospital and healthcare networks, hardening emergency services against cyberattacks and securing medical devices.<ref name=":4">{{Cite web |date=2023-10-03 |title=UCSD School of Medicine awarded $9.5M to develop cybersecurity measures |url=https://www.kpbs.org/news/health/2023/10/03/ucsd-school-of-medicine-awarded-9-5m-to-develop-cybersecurity-measures |access-date=2025-01-22 |website=KPBS Public Media |language=en}}</ref><ref>{{Cite web |last=Wetsman |first=Nicole |date=2018-11-02 |title=The FDA Needs to Better Prepare for Cyberattacks on Medical Devices: Report |url=https://gizmodo.com/the-fda-needs-to-better-prepare-for-cyberattacks-on-med-1830156436 |access-date=2025-01-22 |website=Gizmodo |language=en-US}}</ref><ref>{{Cite web |date=2024-07-04 |title=When ransomware hijacks your health care |url=https://www.wbur.org/onpoint/2024/07/04/ransomware-hackers-healthcare-data |access-date=2025-01-22 |website=www.wbur.org |language=en}}</ref><ref>{{Cite web |last=Drees |first=Jackie |date=2019-06-03 |title=Threats, vulnerabilities of medical device cyberattacks: 4 Qs with UC Davis cybersecurity expert Dr. Jeff Tully |url=https://www.beckershospitalreview.com/cybersecurity/threats-vulnerabilities-of-medical-device-cyberattacks-4-qs-with-uc-davis-cybersecurity-expert-dr-jeff-tully.html |access-date=2025-01-22 |website=www.beckershospitalreview.com |language=en-gb}}</ref><ref>{{Cite web |last=Rappleye |first=Emily |date=2019-05-01 |title=Avoid the 'basic cardinal sins of password generation': 3 questions with UC Davis security expert Dr. Jeff Tully |url=https://www.beckershospitalreview.com/cybersecurity/avoid-the-basic-cardinal-sins-of-password-generation-3-questions-with-uc-davis-security-expert-dr-jeff-tully.html |access-date=2025-01-22 |website=www.beckershospitalreview.com |language=en-gb}}</ref> In addition to those duties, Tully is also an associate clinical professor at the University of California-San Diego School of Medicine where he teaches medical students, residents and fellows and contributes to medical and cybersecurity academic research.<ref name=":3" />
In October 2023, Tully was named co-principal investigator for the Healthcare Ransomware Resiliency and Response Program (H-R3P) at the University of California-San Diego, which secured a $9.5 million Advanced Research Projects Agency for Health grant.<ref name=":2" /><ref name=":4" /><ref name=":5">{{Cite web |date=2024-07-01 |title=DIGIHEALS Awardees {{!}} ARPA-H |url=https://arpa-h.gov/explore-funding/programs/digiheals/awardees |access-date=2025-01-23 |website=arpa-h.gov |language=en}}</ref>
==Selected academic research== * C Dameff, J Selzer, J Fisher, J Killeen, J Tully (2018). "Clinical Cybersecurity Training Through Novel High-Fidelity Simulations." The Journal of Emergency Medicine.<ref>{{Cite journal |last1=Dameff |first1=Christian J. |last2=Selzer |first2=Jordan A. |last3=Fisher |first3=Jonathan |last4=Killeen |first4=James P. |last5=Tully |first5=Jeffrey L. |date=February 2019 |title=Clinical Cybersecurity Training Through Novel High-Fidelity Simulations |url=https://linkinghub.elsevier.com/retrieve/pii/S0736467918310552 |journal=The Journal of Emergency Medicine |language=en |volume=56 |issue=2 |pages=233–238 |doi=10.1016/j.jemermed.2018.10.029|pmid=30553562 |url-access=subscription }}</ref> * J Tully, M Jarrett, S Savage, J Corman, C Dameff (2018). "Digital Defenses for Hacked Hearts: Why Software Patching Can Save Lives." Journal of the American College of Cardiology.<ref>{{Cite journal |last1=Tully |first1=Jeffrey |last2=Jarrett |first2=Mark |last3=Savage |first3=Stefan |last4=Corman |first4=Joshua |last5=Dameff |first5=Christian |date=2018-07-03 |title=Digital Defenses for Hacked Hearts: Why Software Patching Can Save Lives |url=https://linkinghub.elsevier.com/retrieve/pii/S0735109718347168 |journal=Journal of the American College of Cardiology |volume=72 |issue=1 |pages=126–127 |doi=10.1016/j.jacc.2018.03.540 |pmid=29957225 |issn=0735-1097|url-access=subscription }}</ref> * M Goebel, C Dameff, J Tully (2019). "Hacking 9-1-1: Infrastructure Vulnerabilities and Attack Vectors". Journal of Medical Internet Research.<ref>{{Cite journal |last1=Goebel |first1=Mat |last2=Dameff |first2=Christian |last3=Tully |first3=Jeffrey |date=2019-07-09 |title=Hacking 9-1-1: Infrastructure Vulnerabilities and Attack Vectors |journal=Journal of Medical Internet Research |language=en |volume=21 |issue=7 |article-number=e14383 |doi=10.2196/14383 |doi-access=free |issn=1438-8871 |pmc=6647750 |pmid=31290401}}</ref> * J Tully, A Coravos, M Doerr, C, Dameff. "Connected Medical Technology and Cybersecurity Informed Consent: A New Paradigm". Journal of Medical Internet Research.<ref>{{Cite journal |last1=Tully |first1=Jeffrey |last2=Coravos |first2=Andrea |last3=Doerr |first3=Megan |last4=Dameff |first4=Christian |date=2020-03-30 |title=Connected Medical Technology and Cybersecurity Informed Consent: A New Paradigm |journal=Journal of Medical Internet Research |language=en |volume=22 |issue=3 |article-number=e17612 |doi=10.2196/17612 |doi-access=free |issn=1438-8871 |pmc=7154933 |pmid=32224492}}</ref> * J Tully, J Selzer, J Phillips, P O'Connor, C Dameff (2020). "Healthcare Challenges in the Era of Cybersecurity." Health Security.<ref>{{Cite journal |last1=Tully |first1=Jeff |last2=Selzer |first2=Jordan |last3=Phillips |first3=James P. |last4=O'Connor |first4=Patrick |last5=Dameff |first5=Christian |date=2020-06-01 |title=Healthcare Challenges in the Era of Cybersecurity |url=https://www.liebertpub.com/doi/10.1089/hs.2019.0123 |journal=Health Security |language=en |volume=18 |issue=3 |pages=228–231 |doi=10.1089/hs.2019.0123 |pmid=32559153 |issn=2326-5094|url-access=subscription }}</ref> * L Maggio, C Dameff, S Kanter, B Woods, J Tully (2021). "Cybersecurity Challenges and the Academic Health Center: An Interactive Tabletop Simulation for Executives". Academic Medicine : Journal of the Association of American Medical Colleges.<ref>{{Cite journal |last1=Maggio |first1=Lauren A. |last2=Dameff |first2=Christian |last3=Kanter |first3=Steven L. |last4=Woods |first4=Beau |last5=Tully |first5=Jeffrey |date=June 2021 |title=Cybersecurity Challenges and the Academic Health Center: An Interactive Tabletop Simulation for Executives |url=https://journals.lww.com/10.1097/ACM.0000000000003859 |journal=Academic Medicine |language=en |volume=96 |issue=6 |pages=850–853 |doi=10.1097/ACM.0000000000003859 |pmid=33239532 |issn=1040-2446|url-access=subscription }}</ref> * N Sullivan, J Tully, C Dameff, C Opara, M Snead, J Selzer (2023). "A National Survey of Hospital Cyber Attack Emergency Operation Preparedness". Disaster Medicine and Public Health Preparedness.<ref>{{Cite journal |last1=Sullivan |first1=Natalie |last2=Tully |first2=Jeffery |last3=Dameff |first3=Christian |last4=Opara |first4=Chibuzo |last5=Snead |first5=Mackenzie |last6=Selzer |first6=Jordan |date=2023 |title=A National Survey of Hospital Cyber Attack Emergency Operation Preparedness |url=https://www.cambridge.org/core/product/identifier/S193578932200283X/type/journal_article |journal=Disaster Medicine and Public Health Preparedness |language=en |volume=17 |pages=e363 |doi=10.1017/dmp.2022.283 |pmid=36945857 |issn=1935-7893|doi-access=free }}</ref> * C Dameff, J Tully, T Chan, E Castillo, S Savage, P Maysent, T Hemmen, B Clay, C Longhurst (2023). "Ransomware Attack Associated With Disruptions at Adjacent Emergency Departments in the US". JAMA Network Open.<ref>{{Cite journal |last1=Dameff |first1=Christian |last2=Tully |first2=Jeffrey |last3=Chan |first3=Theodore C. |last4=Castillo |first4=Edward M. |last5=Savage |first5=Stefan |last6=Maysent |first6=Patricia |last7=Hemmen |first7=Thomas M. |last8=Clay |first8=Brian J. |last9=Longhurst |first9=Christopher A. |date=2023-05-08 |title=Ransomware Attack Associated With Disruptions at Adjacent Emergency Departments in the US |journal=JAMA Network Open |language=en |volume=6 |issue=5 |pages=e2312270 |doi=10.1001/jamanetworkopen.2023.12270 |issn=2574-3805 |pmc=10167570 |pmid=37155166}}</ref> * H Neprash, C Dameff, J Tully (2024). Cybersecurity Lessons from the Change Healthcare Attack. JAMA Internal Medicine.<ref name="jamanetwork.com"/>
==References== {{Reflist}}
{{Authority control}}
{{DEFAULTSORT:Tully, Jeff}} Category:Living people Category:American anesthesiologists Category:American pediatricians Category:American computer security academics Category:University of Arizona alumni Category:Year of birth missing (living people)