# Jeff Tully

> Mediated Wiki article. Canonical URL: https://mediated.wiki/source/Jeff_Tully
> Markdown URL: https://mediated.wiki/source/Jeff_Tully.md
> Source: https://en.wikipedia.org/wiki/Jeff_Tully
> Source revision: 1344308248
> License: Creative Commons Attribution-ShareAlike 4.0 International (https://creativecommons.org/licenses/by-sa/4.0/)

**Jeff Tully** is a [medical](/source/Medicine) [cybersecurity](/source/Computer_security) researcher whose works have been published in [JAMA Internal Medicine](/source/JAMA_Internal_Medicine), [JAMA Network Open](/source/JAMA_Network_Open), [The Journal of Emergency Medicine](/source/The_Journal_of_Emergency_Medicine), the [Journal of the American College of Cardiology](/source/Journal_of_the_American_College_of_Cardiology) and the [Journal of Medical Internet Research](/source/Journal_of_Medical_Internet_Research), among others.[1][2][3] He has spoken internationally about these topics at conferences like [DEF CON](/source/DEF_CON), the [RSA Conference](/source/RSA_Conference) and [DerbyCon](/source/DerbyCon).[4][5][6][7][8] He is also co-director of The UCSD Center for Healthcare Cybersecurity at the [University of California-San Diego](/source/University_of_California,_San_Diego) and co-principal investigator of the Healthcare Ransomware Resiliency and Response Program (H-R3P).[9][10] Tully is also a [board-certified](/source/Board_certification) [anaesthesiologist](/source/Anesthesiology) and [pediatrician](/source/Pediatrics), as well as an associate [clinical professor](/source/Clinical_professor) at the University of California-San Diego.[11][12]

## Early life and career

While attending the [University of Arizona College of Medicine – Phoenix](/source/University_of_Arizona_College_of_Medicine_%E2%80%93_Phoenix), Tully showed an interest in [biohacking](/source/Body_hacking), presenting at DEF CON 20 in 2013.[4] Tully graduated and specialized in anesthesiology and pediatrics.[8]

Following the [WannaCry ransomware attacks](/source/WannaCry_ransomware_attack) in 2017, Tully shifted his attention to improving the cybersecurity of emergency medical services, [hospitals](/source/Hospital), critical medical infrastructure, and [medical devices](/source/Medical_device). He organized the CyberMed Summit, a medical cybersecurity conference. The CyberMed Summit offered practical, hands-on clinical simulations of cybersecurity breaches in hospital environments and included medical professionals, cybersecurity experts, law-enforcement officials, policymakers and hackers.[13][14][15] During the COVID-19 pandemic, Tully brought attention to the security issues of [telemedicine](/source/Telehealth) and the increased possibility of [cyberattacks](/source/Cyberattack).[16]

Tully advocates securing access to hospital and healthcare networks, hardening emergency services against cyberattacks and securing medical devices.[17][18][19][20][21] In addition to those duties, Tully is also an associate clinical professor at the [University of California-San Diego School of Medicine](/source/University_of_California,_San_Diego_School_of_Medicine) where he teaches medical students, residents and fellows and contributes to medical and cybersecurity academic research.[12]

In October 2023, Tully was named co-principal investigator for the Healthcare Ransomware Resiliency and Response Program (H-R3P) at the University of California-San Diego, which secured a $9.5 million [Advanced Research Projects Agency for Health](/source/Advanced_Research_Projects_Agency_for_Health) grant.[9][17][10]

## Selected academic research

- C Dameff, J Selzer, J Fisher, J Killeen, J Tully (2018). "Clinical Cybersecurity Training Through Novel High-Fidelity Simulations." The Journal of Emergency Medicine.[22]
- J Tully, M Jarrett, S Savage, J Corman, C Dameff (2018). "Digital Defenses for Hacked Hearts: Why Software Patching Can Save Lives." Journal of the American College of Cardiology.[23]
- M Goebel, C Dameff, J Tully (2019). "Hacking 9-1-1: Infrastructure Vulnerabilities and Attack Vectors". Journal of Medical Internet Research.[24]
- J Tully, A Coravos, M Doerr, C, Dameff. "Connected Medical Technology and Cybersecurity Informed Consent: A New Paradigm". Journal of Medical Internet Research.[25]
- J Tully, J Selzer, J Phillips, P O'Connor, C Dameff (2020). "Healthcare Challenges in the Era of Cybersecurity." Health Security.[26]
- L Maggio, C Dameff, S Kanter, B Woods, J Tully (2021). "Cybersecurity Challenges and the Academic Health Center: An Interactive Tabletop Simulation for Executives". Academic Medicine : Journal of the [Association of American Medical Colleges](/source/Association_of_American_Medical_Colleges).[27]
- N Sullivan, J Tully, C Dameff, C Opara, M Snead, J Selzer (2023). "A National Survey of Hospital Cyber Attack Emergency Operation Preparedness". [Disaster Medicine](/source/Disaster_medicine) and Public Health Preparedness.[28]
- C Dameff, J Tully, T Chan, E Castillo, S Savage, P Maysent, T Hemmen, B Clay, C Longhurst (2023). "Ransomware Attack Associated With Disruptions at Adjacent Emergency Departments in the US". JAMA Network Open.[29]
- H Neprash, C Dameff, J Tully (2024). Cybersecurity Lessons from the [Change Healthcare](/source/Change_Healthcare) Attack. JAMA Internal Medicine.[3]

## References

1. Dameff, Christian; Tully, Jeffrey; Chan, Theodore C.; Castillo, Edward M.; Savage, Stefan; Maysent, Patricia; Hemmen, Thomas M.; Clay, Brian J.; Longhurst, Christopher A. (2023-05-08). "Ransomware Attack Associated With Disruptions at Adjacent Emergency Departments in the US". *JAMA Network Open*. **6** (5): e2312270. [doi:10.1001/jamanetworkopen.2023.12270](https://doi.org/10.1001/jamanetworkopen.2023.12270). [ISSN 2574-3805](https://www.worldcat.org/issn/2574-3805). [PMC 10167570](https://www.ncbi.nlm.nih.gov/pmc/articles/PMC10167570). [PMID 37155166](https://pubmed.ncbi.nlm.nih.gov/37155166)

1. Goebel, Mat; Dameff, Christian; Tully, Jeffrey (2019-07-09). "Hacking 9-1-1: Infrastructure Vulnerabilities and Attack Vectors". *Journal of Medical Internet Research*. **21** (7). [doi:10.2196/14383](https://doi.org/10.2196/14383). [ISSN 1438-8871](https://www.worldcat.org/issn/1438-8871). [PMC 6647750](https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6647750). [PMID 31290401](https://pubmed.ncbi.nlm.nih.gov/31290401)

1. Neprash, Hannah T.; Dameff, Christian; Tully, Jeffrey (2024-11-01). ["Cybersecurity Lessons From the Change Healthcare Attack"](https://jamanetwork.com/journals/jamainternalmedicine/fullarticle/2823421). *JAMA Internal Medicine*. **184** (11): 1283–1284. [doi:10.1001/jamainternmed.2024.3162](https://doi.org/10.1001/jamainternmed.2024.3162). [ISSN 2168-6106](https://www.worldcat.org/issn/2168-6106). [PMID 39250110](https://pubmed.ncbi.nlm.nih.gov/39250110)

1. ["Hacking humans: Building a better you"](https://www.cnet.com/culture/hacking-humans-building-a-better-you/). *CNET*. Retrieved 2025-01-22.

1. Zetter, Kim. ["How Hackers Could Mess With 911 Systems and Put You at Risk"](https://www.wired.com/2014/08/how-hackers-could-mess-with-911/). *Wired*. [ISSN 1059-1028](https://www.worldcat.org/issn/1059-1028). Retrieved 2025-01-22.

1. Thomson, Iaian (September 26, 2017). ["Docs ran a simulation of what would happen if really nasty malware hit a city's hospitals"](https://www.theregister.com/2017/09/26/malware_hospital_simulation/m). Retrieved January 22, 2025.

1. Barth, Bradley (2020-09-23). ["Lessons from the ransomware death: Prioritize cyber emergency preparedness"](https://www.scworld.com/news/lessons-from-the-ransomware-death-cyber-emergency-preparedness-critical). *SC Media*. Retrieved 2025-01-22.

1. Innes, Stephanie. ["Can medical devices be hacked? Arizona doctors prepare for possibility of cyberattacks"](https://www.azcentral.com/story/news/local/arizona-health/2018/12/27/ethical-hackers-warn-physicians-cyberattacks-christian-dameff-arizona-college-medicine-jeff-tully/2277625002/). *The Arizona Republic*. Retrieved 2025-01-22.

1. Ribeiro, Anna (2023-10-04). ["HHS' ARPA-H awards $50 million in funding for six research contracts to advance health data security"](https://industrialcyber.co/news/hhs-arpa-h-awards-50-million-in-funding-for-six-research-contracts-to-advance-health-data-security/). *Industrial Cyber*. [Archived](https://web.archive.org/web/20240816033356/https://industrialcyber.co/news/hhs-arpa-h-awards-50-million-in-funding-for-six-research-contracts-to-advance-health-data-security/) 2024-08-16 at the Wayback Machine. Retrieved 2025-01-22.

1. ["DIGIHEALS Awardees | ARPA-H"](https://arpa-h.gov/explore-funding/programs/digiheals/awardees). *arpa-h.gov*. 2024-07-01. Retrieved 2025-01-23.

1. ["Verification of Certification | The American Board of Pediatrics"](https://www.abp.org/verification-certification). *www.abp.org*. Retrieved 2025-01-22.

1. ["Jeffrey Tully | UCSD Profiles"](https://profiles.ucsd.edu/jeffrey.tully). *profiles.ucsd.edu*. Retrieved 2025-01-22.

1. Stanford, Julianne. ["Hacking a heart pacemaker isn't science fiction. See what experts are doing to prevent it"](https://www.azcentral.com/story/news/local/phoenix/2017/06/12/hacking-pacemaker-isnt-science-fiction-movie-plotline-but-reality/378176001/). *The Arizona Republic*. Retrieved 2025-01-22.

1. ["Video Fears of hackers targeting hospitals, medical devices"](https://abcnews.go.com/Nightline/video/fears-hackers-targeting-hospitals-medical-devices-48343190). *ABC News*. Retrieved 2025-01-22.

1. ["Now doctors need to be hackers, too"](https://www.engadget.com/2017-06-16-now-doctors-need-to-be-hackers-too.html). *Engadget*. 2017-06-16. Retrieved 2025-01-22.

1. Drees, Jackie (2020-05-06). ["COVID-19 cyber threats: Why data integrity is crucial & how to protect it"](https://www.beckershospitalreview.com/cybersecurity/covid-19-cyber-threats-why-data-integrity-is-crucial-how-to-protect-it.html). *www.beckershospitalreview.com*. Retrieved 2025-01-22.

1. ["UCSD School of Medicine awarded $9.5M to develop cybersecurity measures"](https://www.kpbs.org/news/health/2023/10/03/ucsd-school-of-medicine-awarded-9-5m-to-develop-cybersecurity-measures). *KPBS Public Media*. 2023-10-03. Retrieved 2025-01-22.

1. Wetsman, Nicole (2018-11-02). ["The FDA Needs to Better Prepare for Cyberattacks on Medical Devices: Report"](https://gizmodo.com/the-fda-needs-to-better-prepare-for-cyberattacks-on-med-1830156436). *Gizmodo*. Retrieved 2025-01-22.

1. ["When ransomware hijacks your health care"](https://www.wbur.org/onpoint/2024/07/04/ransomware-hackers-healthcare-data). *www.wbur.org*. 2024-07-04. Retrieved 2025-01-22.

1. Drees, Jackie (2019-06-03). ["Threats, vulnerabilities of medical device cyberattacks: 4 Qs with UC Davis cybersecurity expert Dr. Jeff Tully"](https://www.beckershospitalreview.com/cybersecurity/threats-vulnerabilities-of-medical-device-cyberattacks-4-qs-with-uc-davis-cybersecurity-expert-dr-jeff-tully.html). *www.beckershospitalreview.com*. Retrieved 2025-01-22.

1. Rappleye, Emily (2019-05-01). ["Avoid the 'basic cardinal sins of password generation': 3 questions with UC Davis security expert Dr. Jeff Tully"](https://www.beckershospitalreview.com/cybersecurity/avoid-the-basic-cardinal-sins-of-password-generation-3-questions-with-uc-davis-security-expert-dr-jeff-tully.html). *www.beckershospitalreview.com*. Retrieved 2025-01-22.

1. Dameff, Christian J.; Selzer, Jordan A.; Fisher, Jonathan; Killeen, James P.; Tully, Jeffrey L. (February 2019). ["Clinical Cybersecurity Training Through Novel High-Fidelity Simulations"](https://linkinghub.elsevier.com/retrieve/pii/S0736467918310552). *The Journal of Emergency Medicine*. **56** (2): 233–238. [doi:10.1016/j.jemermed.2018.10.029](https://doi.org/10.1016/j.jemermed.2018.10.029). [PMID 30553562](https://pubmed.ncbi.nlm.nih.gov/30553562)

1. Tully, Jeffrey; Jarrett, Mark; Savage, Stefan; Corman, Joshua; Dameff, Christian (2018-07-03). ["Digital Defenses for Hacked Hearts: Why Software Patching Can Save Lives"](https://linkinghub.elsevier.com/retrieve/pii/S0735109718347168). *Journal of the American College of Cardiology*. **72** (1): 126–127. [doi:10.1016/j.jacc.2018.03.540](https://doi.org/10.1016/j.jacc.2018.03.540). [ISSN 0735-1097](https://www.worldcat.org/issn/0735-1097). [PMID 29957225](https://pubmed.ncbi.nlm.nih.gov/29957225)

1. Goebel, Mat; Dameff, Christian; Tully, Jeffrey (2019-07-09). "Hacking 9-1-1: Infrastructure Vulnerabilities and Attack Vectors". *Journal of Medical Internet Research*. **21** (7). [doi:10.2196/14383](https://doi.org/10.2196/14383). [ISSN 1438-8871](https://www.worldcat.org/issn/1438-8871). [PMC 6647750](https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6647750). [PMID 31290401](https://pubmed.ncbi.nlm.nih.gov/31290401)

1. Tully, Jeffrey; Coravos, Andrea; Doerr, Megan; Dameff, Christian (2020-03-30). "Connected Medical Technology and Cybersecurity Informed Consent: A New Paradigm". *Journal of Medical Internet Research*. **22** (3). [doi:10.2196/17612](https://doi.org/10.2196/17612). [ISSN 1438-8871](https://www.worldcat.org/issn/1438-8871). [PMC 7154933](https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7154933). [PMID 32224492](https://pubmed.ncbi.nlm.nih.gov/32224492)

1. Tully, Jeff; Selzer, Jordan; Phillips, James P.; O'Connor, Patrick; Dameff, Christian (2020-06-01). ["Healthcare Challenges in the Era of Cybersecurity"](https://www.liebertpub.com/doi/10.1089/hs.2019.0123). *Health Security*. **18** (3): 228–231. [doi:10.1089/hs.2019.0123](https://doi.org/10.1089/hs.2019.0123). [ISSN 2326-5094](https://www.worldcat.org/issn/2326-5094). [PMID 32559153](https://pubmed.ncbi.nlm.nih.gov/32559153)

1. Maggio, Lauren A.; Dameff, Christian; Kanter, Steven L.; Woods, Beau; Tully, Jeffrey (June 2021). ["Cybersecurity Challenges and the Academic Health Center: An Interactive Tabletop Simulation for Executives"](https://journals.lww.com/10.1097/ACM.0000000000003859). *Academic Medicine*. **96** (6): 850–853. [doi:10.1097/ACM.0000000000003859](https://doi.org/10.1097/ACM.0000000000003859). [ISSN 1040-2446](https://www.worldcat.org/issn/1040-2446). [PMID 33239532](https://pubmed.ncbi.nlm.nih.gov/33239532)

1. Sullivan, Natalie; Tully, Jeffery; Dameff, Christian; Opara, Chibuzo; Snead, Mackenzie; Selzer, Jordan (2023). ["A National Survey of Hospital Cyber Attack Emergency Operation Preparedness"](https://www.cambridge.org/core/product/identifier/S193578932200283X/type/journal_article). *Disaster Medicine and Public Health Preparedness*. **17**: e363. [doi:10.1017/dmp.2022.283](https://doi.org/10.1017/dmp.2022.283). [ISSN 1935-7893](https://www.worldcat.org/issn/1935-7893). [PMID 36945857](https://pubmed.ncbi.nlm.nih.gov/36945857)

1. Dameff, Christian; Tully, Jeffrey; Chan, Theodore C.; Castillo, Edward M.; Savage, Stefan; Maysent, Patricia; Hemmen, Thomas M.; Clay, Brian J.; Longhurst, Christopher A. (2023-05-08). "Ransomware Attack Associated With Disruptions at Adjacent Emergency Departments in the US". *JAMA Network Open*. **6** (5): e2312270. [doi:10.1001/jamanetworkopen.2023.12270](https://doi.org/10.1001/jamanetworkopen.2023.12270). [ISSN 2574-3805](https://www.worldcat.org/issn/2574-3805). [PMC 10167570](https://www.ncbi.nlm.nih.gov/pmc/articles/PMC10167570). [PMID 37155166](https://pubmed.ncbi.nlm.nih.gov/37155166)

---
Adapted from the Wikipedia article [Jeff Tully](https://en.wikipedia.org/wiki/Jeff_Tully) by Wikipedia contributors ([contributor history](https://en.wikipedia.org/wiki/Jeff_Tully?action=history)). Available under [Creative Commons Attribution-ShareAlike 4.0 International](https://creativecommons.org/licenses/by-sa/4.0/). Changes may have been made.