June 19, 2026 • 4 mins
In this episode, we discuss Paubox Forms' new conditional logic feature, the Conduent breach affecting 62 million people, and critical findings from controlled tests revealing Amazon SES may transmit PHI in plaintext despite documentation claims. We also cover recent ransomware incidents at Mt. Baker, Northwest Radiologists, and Singing River Health System, along with key takeaways from the June Zoom social mixer on AI tooling and vendor management strategies for small IT teams.
Listen
Watch
Mark as Played
Transcript
Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
SPEAKER_01 (00:00):
You're listening to Pow Box Weekly, fully automated.
SPEAKER_00 (00:02):
I'm Jen, cybersecurity analyst, and I've
been staring at breach reportsso long I dream in HIPAA
violations.
SPEAKER_01 (00:09):
And I'm Alex, healthcare IT guy who keeps
hoping one week the news will beboring.
This is not that week.
SPEAKER_00 (00:16):
No, it is not.
Let's start with some actualgood news though.
PowBox forms just gotconditional logic.
SPEAKER_01 (00:23):
Finally, show or hide fields based on previous
answers.
It sounds simple, but it's huge.
No more confusing patients withirrelevant questions.
The form adapts.
And they rebuilt the wholeinterface.
Searchable element library,on-canvas editing, dark mode.
Dark mode.
My people rejoice.
No extra cost if you're alreadya subscriber.
(00:46):
Just there.
SPEAKER_00 (00:47):
Alright, now the less fun stuff.
Conduit.
62 million people.
62.2 million to be precise.
SPEAKER_01 (00:54):
Third largest healthcare breach in US history.
Behind change healthcare at 192million and Anthem at 78
million.
So we're keeping a leaderboardnow.
Great.
The scale is just it's hard towrap your head around.
SPEAKER_00 (01:09):
One intrusion.
Tens of millions of records.
That's the reality healthcare isoperating in.
SPEAKER_01 (01:14):
Speaking of uncomfortable realities, Amazon
SES.
Oh, this one's fun.
And by fun I mean infuriating.
Popbox ran 14 controlled tests.
Amazon's documentation says itrequires TLS 1.2.
Except when it doesn't.
Right.
If the receiving server doesn'tsupport encryption, SES just
(01:36):
sends PHI in plaintext.
SPEAKER_00 (01:38):
The documentation says one thing, the headers show
another.
SPEAKER_01 (01:42):
So if you're a developer trusting that setting.
SPEAKER_00 (01:45):
You shouldn't be.
Verify.
Always verify.
SPEAKER_01 (01:49):
This is why we test things.
SPEAKER_00 (01:50):
This is why Powbox tested things.
Everyone else was just trustingthe label on the box.
SPEAKER_01 (01:55):
On a lighter note, the June Zoom Social Mixer.
June 2026.
Time is fake.
The conversation gotinteresting.
MCP server support is now avendor selection criterion.
Which tells you where AI toolingis headed.
And the group overwhelminglypreferred Claude over ChatGPT.
For coding, HIPAA workflows,reasoning tasks.
SPEAKER_00 (02:18):
Interesting.
The vibe check on AI tools isreal now.
People have preferences.
SPEAKER_01 (02:24):
The takeaway for small IT teams was solid too.
Automate the recurring stuff.
Invest in user education.
SPEAKER_00 (02:31):
And treat your vendors like force multipliers,
not just tools you pay for andforget about.
Exactly.
SPEAKER_01 (02:37):
That feedback loop matters.
It shapes the roadmap.
SPEAKER_00 (02:40):
Okay, back to breaches.
SPEAKER_01 (02:42):
Mount Baker and Northwest Radiologists.
Five-day ransomware attack.
362,000 patients exposed.
Four class action lawsuits.
Settled for 3.3 million, 18months later.
SPEAKER_00 (02:56):
They did the right things after, secured the
environment, called lawenforcement, brought in experts.
SPEAKER_01 (03:02):
But after is the keyword.
SPEAKER_00 (03:04):
Always is.
The lawsuit math is brutal.
Once those class actions pileup, you're paying either way.
And then there's Singing RiverHealth System.
Anubis.
SPEAKER_01 (03:14):
Ransomware as a service gang.
They're claiming 293 gigabytesof data, over 1.2 million files.
SPEAKER_00 (03:22):
From a December 2025 breach affecting about 54,000
patients.
SPEAKER_01 (03:26):
The RAS model is what gets me.
It's a franchise now.
SPEAKER_00 (03:30):
It's been a franchise.
Low barrier to entry, highpayout potential.
SPEAKER_01 (03:35):
So we're not fighting one group.
We're fighting a business model.
SPEAKER_00 (03:39):
Exactly.
And they're scaling faster thanmost healthcare orgs can patch.
So what's the thread this week?
Same thread as always.
Bad configurations.
SPEAKER_01 (03:51):
Amazon assumes TLS is there.
It wasn't.
SPEAKER_00 (03:55):
Organizations assume their defenses are enough.
They weren't.
SPEAKER_01 (03:58):
But here's the thing.
Most of this is fixable.
SPEAKER_00 (04:01):
That's the frustrating part.
And the hopeful part.
Conditional logic and forms?
Fixable.
Email encryption that actuallyworks?
Fixable.
Patching before Anubis shows up?
Fixable.
SPEAKER_01 (04:14):
It's not about bad luck.
It's about blind spots we canactually address.
If we choose to.
That's Pow Box Weekly.
Thanks for listening.
SPEAKER_00 (04:23):
Stay patched, stay skeptical, and verify your TLS
settings.
SPEAKER_01 (04:27):
See you next week.
You're listening to Pow Box Weekly, fully automated.
SPEAKER_00 (00:02):
I'm Jen, cybersecurity analyst, and I've
been staring at breach reportsso long I dream in HIPAA
violations.
SPEAKER_01 (00:09):
And I'm Alex, healthcare IT guy who keeps
hoping one week the news will beboring.
This is not that week.
SPEAKER_00 (00:16):
No, it is not.
Let's start with some actualgood news though.
PowBox forms just gotconditional logic.
SPEAKER_01 (00:23):
Finally, show or hide fields based on previous
answers.
It sounds simple, but it's huge.
No more confusing patients withirrelevant questions.
The form adapts.
And they rebuilt the wholeinterface.
Searchable element library,on-canvas editing, dark mode.
Dark mode.
My people rejoice.
No extra cost if you're alreadya subscriber.
(00:46):
Just there.
SPEAKER_00 (00:47):
Alright, now the less fun stuff.
Conduit.
62 million people.
62.2 million to be precise.
SPEAKER_01 (00:54):
Third largest healthcare breach in US history.
Behind change healthcare at 192million and Anthem at 78
million.
So we're keeping a leaderboardnow.
Great.
The scale is just it's hard towrap your head around.
SPEAKER_00 (01:09):
One intrusion.
Tens of millions of records.
That's the reality healthcare isoperating in.
SPEAKER_01 (01:14):
Speaking of uncomfortable realities, Amazon
SES.
Oh, this one's fun.
And by fun I mean infuriating.
Popbox ran 14 controlled tests.
Amazon's documentation says itrequires TLS 1.2.
Except when it doesn't.
Right.
If the receiving server doesn'tsupport encryption, SES just
(01:36):
sends PHI in plaintext.
SPEAKER_00 (01:38):
The documentation says one thing, the headers show
another.
SPEAKER_01 (01:42):
So if you're a developer trusting that setting.
SPEAKER_00 (01:45):
You shouldn't be.
Verify.
Always verify.
SPEAKER_01 (01:49):
This is why we test things.
SPEAKER_00 (01:50):
This is why Powbox tested things.
Everyone else was just trustingthe label on the box.
SPEAKER_01 (01:55):
On a lighter note, the June Zoom Social Mixer.
June 2026.
Time is fake.
The conversation gotinteresting.
MCP server support is now avendor selection criterion.
Which tells you where AI toolingis headed.
And the group overwhelminglypreferred Claude over ChatGPT.
For coding, HIPAA workflows,reasoning tasks.
SPEAKER_00 (02:18):
Interesting.
The vibe check on AI tools isreal now.
People have preferences.
SPEAKER_01 (02:24):
The takeaway for small IT teams was solid too.
Automate the recurring stuff.
Invest in user education.
SPEAKER_00 (02:31):
And treat your vendors like force multipliers,
not just tools you pay for andforget about.
Exactly.
SPEAKER_01 (02:37):
That feedback loop matters.
It shapes the roadmap.
SPEAKER_00 (02:40):
Okay, back to breaches.
SPEAKER_01 (02:42):
Mount Baker and Northwest Radiologists.
Five-day ransomware attack.
362,000 patients exposed.
Four class action lawsuits.
Settled for 3.3 million, 18months later.
SPEAKER_00 (02:56):
They did the right things after, secured the
environment, called lawenforcement, brought in experts.
SPEAKER_01 (03:02):
But after is the keyword.
SPEAKER_00 (03:04):
Always is.
The lawsuit math is brutal.
Once those class actions pileup, you're paying either way.
And then there's Singing RiverHealth System.
Anubis.
SPEAKER_01 (03:14):
Ransomware as a service gang.
They're claiming 293 gigabytesof data, over 1.2 million files.
SPEAKER_00 (03:22):
From a December 2025 breach affecting about 54,000
patients.
SPEAKER_01 (03:26):
The RAS model is what gets me.
It's a franchise now.
SPEAKER_00 (03:30):
It's been a franchise.
Low barrier to entry, highpayout potential.
SPEAKER_01 (03:35):
So we're not fighting one group.
We're fighting a business model.
SPEAKER_00 (03:39):
Exactly.
And they're scaling faster thanmost healthcare orgs can patch.
So what's the thread this week?
Same thread as always.
Bad configurations.
SPEAKER_01 (03:51):
Amazon assumes TLS is there.
It wasn't.
SPEAKER_00 (03:55):
Organizations assume their defenses are enough.
They weren't.
SPEAKER_01 (03:58):
But here's the thing.
Most of this is fixable.
SPEAKER_00 (04:01):
That's the frustrating part.
And the hopeful part.
Conditional logic and forms?
Fixable.
Email encryption that actuallyworks?
Fixable.
Patching before Anubis shows up?
Fixable.
SPEAKER_01 (04:14):
It's not about bad luck.
It's about blind spots we canactually address.
If we choose to.
That's Pow Box Weekly.
Thanks for listening.
SPEAKER_00 (04:23):
Stay patched, stay skeptical, and verify your TLS
settings.
SPEAKER_01 (04:27):
See you next week.
Popular Podcasts
Stuff You Should Know
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com
The Bobby Bones Show
Listen to 'The Bobby Bones Show' by downloading the daily full replay.