VIP Community Services

Protecting care, data, and trust with AI-powered security

As a Certified Behavioral Health Center and Federally Qualified Health Center, VIP Community Services operates at the intersection of healthcare delivery, community services, and an increasingly complex compliance landscape. Serving thousands of individuals annually, VIP manages some of the most sensitive personal and medical data in its community.

For Jimmy Liranzo, Vice President of IT and Information Security, cybersecurity is inseparable from VIP’s mission. “Primarily, it’s about protecting patient data,” Liranzo explains. “Whether it’s staff or patients, that trust is foundational. If we lose it, we lose more than systems. We lose our ability to serve.”

But as cyberattacks grew in sophistication and scale, protecting sensitive data across more than 20 locations and remote users became increasingly challenging for VIP’s lean IT team.

Siloed tools, rising threats, and limited visibility

VIP invested in several traditional security tools, including endpoint detection and phishing defenses. But like many organizations, those tools operated in isolation. “Yes, I had EDR. Yes, I had phishing protection,” says Liranzo. “But none of them talked to each other. And if one failed, then what?”

This lack of integration created blind spots across VIP’s digital environment. With staff and patients accessing systems from multiple locations, and in some cases from residential facilities, maintaining visibility into what was happening across the organization was a constant challenge.

Phishing, particularly impersonation attacks, posed a growing risk. In one incident, an executive received a malicious file from a known contact whose account had been compromised. Because there was a history of communication between the sender and recipient, the legacy email security tools failed to detect the threat. The email was forwarded internally, increasing exposure before abnormal behavior finally surfaced.

“Thankfully, we weren’t breached,” Liranzo notes. “But we lost time trying to understand what was happening. And in healthcare, delays matter.”

A smarter approach to email security

To close those gaps, VIP partnered with Darktrace, deploying Darktrace / EMAIL with Self-Learning AI across its digital environment. Unlike traditional rule-based tools, Darktrace’s AI learns what’s normal for each user and for the organization as a whole, allowing it to detect subtle deviations that indicate emerging threats.

For VIP, this capability immediately changed how email threats were handled. In the impersonation scenarios that previously slipped through, Darktrace was able to identify abnormal recipient patterns and behavioral anomalies, even when the sender appeared legitimate.

“Although one person had communicated with that sender before, the rest of the recipients hadn’t,” says Liranzo. “Darktrace picked up on that anomaly, giving us the chance to step in before it became something bigger.”

Equally important was Darktrace’s ability to take autonomous action within predefined boundaries, pausing suspicious activity until the team could investigate. “What I really needed was that additional team member watching and reacting when we couldn’t. Before Darktrace, a 3 a.m. alert meant waking someone up. Now the system understands what does and doesn’t fit our norms and can act. It’s given me back my sleep and peace of mind.”

Stronger security, empowered teams

Neutralizing email threats before they disrupt care

Since deploying Darktrace, VIP has significantly reduced the risk posed by phishing and impersonation attacks, achieving an exceptional level of precision in identifying impersonation attempts and blocking emails designed to exploit trust, urgency, or authority before they reach users. This proactive defense has helped VIP neutralize threats early, preventing disruptions that could affect care delivery, housing services, or patient communications.

Creating opportunity for learning, certification, and leadership

Rather than replacing staff, Darktrace has augmented the IT and security team, eliminating manual triage and freeing time for higher-value work. Liranzo estimates that the organization has effectively “gained at least one full-time employee back, saving more than 200 hours previously spent investigating alerts and chasing false positives.”

That time has been reinvested in people.

“One of our help desk team members became interested in cybersecurity,” he says. “She started going through Darktrace training, learning how the AI analyzes incidents. Now she’s contributing at a higher level.” Another team member used the reclaimed time to pursue advanced certifications, including Certified Ethical Hacker, and now plays a greater role in audits and proactive security planning.

“In essence, we’ve all been elevated,” Liranzo says. “The AI takes on the heavy lifting, and the team gets to focus on the future.”

Meeting regulatory expectations without added complexity

Darktrace’s role in strengthening VIP’s overall security posture supports VIP’s compliance efforts across healthcare and nonprofit operations. By providing visibility across email, network activity, and data movement – and by stopping risky behavior in real time – Darktrace has helped VIP maintain confidence that appropriate safeguards are in place to protect sensitive information.

For a nonprofit with limited resources operating under scrutiny from regulators, auditors, and cyber insurers alike, that assurance is critical.

Proactive security to support growth and innovation

As VIP continues to expand its services and embrace AI across the organization, data protection remains a top priority. “We’re diving deeper into data,” Liranzo explains. “As more of the agency benefits from AI, we’re making sure data loss prevention (DLP) is properly in place.” He notes that Darktrace has already demonstrated DLP-like capabilities, stopping users from moving sensitive documents outside the environment based on behavioral context rather than static rules.

Looking forward, Liranzo sees AI playing an even greater role in cybersecurity, making advanced defense accessible to teams without deep security backgrounds. “As the fear of AI replacing humans fades, people are realizing it’s here to help us, not replace us.”

By combining human judgment with machine speed and scale, VIP has moved from reactive defense to a more proactive, resilient security posture that aligns with its mission and realities as a nonprofit healthcare provider. As Liranzo puts it simply: “When you can protect data, protect people, and still sleep at night, that’s a win.”

‍