Kaunas City Polyclinic Implements YubiKeys for Security

This case study documents the implementation of YubiKeys at Kaunas City Polyclinic, Lithuania's largest outpatient healthcare institution. The clinic serves over 160,000 residents and employs approximately 1,700 professionals. The objective was to enhance security and achieve compliance with the EU's NIS2 directive. The clinic faced challenges with traditional password systems, which were vulnerable to phishing attacks. By deploying YubiKeys, the clinic transitioned to a passwordless, phishing-resistant authentication system for Microsoft accounts. Key results included an 80% reduction in password reset requests, improved login reliability, and enhanced protection of sensitive patient data. The deployment process involved collaboration with Hermitage Solutions and included phases for preparation, testing, and rollout. The YubiKey solution not only improved security but also streamlined operations, aligning with GDPR compliance. The case study serves as a model for other healthcare institutions aiming to bolster their cybersecurity measures while maintaining operational efficiency.