Start here. Solve for anything.

The group's core method was vishing: calling help desks impersonating locked-out employees to get passwords reset or MFA prompts approved, and it was used against hospitals including some of the largest U.S. health systems as far back as 2024. Prosecutors tie at least a dozen companies and 29 victims to the crew, with single incidents netting $6.3M and $1.7M. The test for leaders is not whether the verification policy exists but whether staff actually follow it when a caller claims to be a clinician in urgent need.

The useful vendor test is a three-stage demand: flag the problem, recommend the specific fix, then measure whether the fix actually resolved it. Generic tooling breaks on clinical specificity — off-the-shelf ambient scribing misreads medication names and can't separate patient from physician speech, and a single Coumadin refill-check workflow needed 100–200 distinct checks against 30–40 for typical medications, forcing a separate product line. Trinity's counterpoint is that administrative AI pays reliably: pre-implementation revenue cycle analysis found roughly $36 million a year in undercoding, and ambient documentation is projected to add $5–$10 per encounter in captured reimbursement.

Trinity Health in Minot, North Dakota is the first acute care system on Orchard, a SaaS-driven Foundation variant built for smaller systems without implementation bench strength. Getting there required 13 rounds of data cleanup during the Workday implementation to resolve fragmented and duplicate legacy records, plus a data lake and named data owners who must approve any change in their domain; duplicate medical record rates are now under 2% ahead of go-live. Selection skipped the traditional RFP: vendors spent weeks embedded in departments before proposing anything, and 300-plus staff — about 10% of the organization — produced a 97.9% preference for Epic.