Fortified Health Security Expands Horizons with Strategic Latitude Acquisition

Fortified Health Security Expands Horizons with Strategic Latitude Acquisition

Summary:

• Fortified Health Security, a managed security provider focused on health care, has acquired Latitude Information Security, adding to its advisory services.
• Latitude brings expertise in HITRUST assessments, risk assessments and third-party risk management.
• The deal reflects how health systems want fewer vendors that cover more of their security needs.

Fortified Health Security’s purchase of Latitude is another sign that health care security buyers want fewer separate vendors and deeper advisory help from the ones they keep. Hospitals face ransomware, compliance pressure and a long list of risky suppliers. Deals like this are about offering more of that help under one roof.

What the Deal Adds

Fortified, based in Brentwood, Tennessee, announced on September 29, 2025, that it had acquired Latitude, a Philadelphia-area firm focused on health care. Latitude is known for HITRUST CSF assessments, risk assessments and third-party risk management. The Latitude team keeps serving its clients and will operate under the Fortified name.

How the Pieces Fit

Fortified CEO Dan L. Dodson said in the announcement that “Latitude’s healthcare-focus and mission aligned with ours, so it made sense to become one unified team.” He said the deal supports Fortified’s goal of “simplifying cyber operations for providers so that they can continue to focus on patient care.”

Latitude CEO Mark Ferrari now leads a new Risk and Governance Services division at Fortified. The pitch to clients is simple. Latitude finds the gaps in an assessment. Fortified’s managed services help fix them and keep watch afterward.

Why Health Care Security Matters So Much

Under Pressure

Hospitals have become one of the most common ransomware targets. Attacks can shut down systems and delay care for weeks, and breaches expose patient records that cannot be changed like a password. Many smaller health systems lack the staff to handle compliance and security work on their own.

That is where firms like Fortified come in. HITRUST certification is often required by large health systems and insurers that want proof their partners protect data, and many providers need outside help to get there.

What Comes Next

Consolidation Keeps Going

Health care security is a crowded market, and smaller firms are being bought up. Buyers want providers who can assess risk, fix problems and monitor systems around the clock.

The Fortified deal fits that trend. It adds a team with deep HITRUST experience and a new regional office.

The Takeaway

Fortified Health Security’s acquisition of Latitude expands what it can offer health care clients, especially on compliance and risk assessments. The real test will be how smoothly the two teams combine.

For hospitals, the lesson is broader. Security help works best when assessment and fixes come together. That is the gap this deal aims to close.

Dan Evert, CCNP

Dan Evert is a self proclaimed Router Jockey. Dan got heavily involved in networking right out of high school and has never looked back! Dan is giving back by working with high school students to get them involved and interested in Networking and Security.