Cybersecurity CEO accused of running malware on hospital PC blabs about it on LinkedIn
(2025/04/29)
- Reference: 1745882934
- News link: https://www.theregister.co.uk/2025/04/28/infosec_ceo_accused_of_installing_malware/
- Source link:
Updated An Oklahoma City cybersecurity professional accused of installing spyware on a hospital PC confirmed on LinkedIn key details of the drama.
Jeffrey Bowie, whom court [1]records indicate has been charged with two counts of violating Oklahoma's Computer Crimes Act, came under investigation after he was suspected of installing a software nasty on a computer at St Anthony's Hospital in August 2024.
According to [2]reports , Bowie was seen using both a computer for guests and a staff workstation at the hospital. When confronted by hospital employees, he said he needed to use the equipment while visiting a family member undergoing surgery. A forensic review is said to have [3]uncovered malware on one of the PCs, which was quickly removed and reported to authorities.
[4]
A St Anthony's representative told The Register the infection was addressed immediately and no patient information was accessed.
[5]
[6]
Bowie, who [7]identifies himself as the CEO of both a cybersecurity company in Edmond, Oklahoma, and a [8]company whose [9]description on a cached Google search result indicates it sells or sold [10]Kratom extracts, took to LinkedIn to explain himself.
In a [11]post ( [12]archived here in case the original is taken down), Bowie contested the accusations though ultimately admitted to writing and running software on one hospital system that took a screenshot every 20 minutes and sent it to a remote host.
[13]
He claimed the code was written "on the fly" using PowerShell on a "guest computer designated for patients in the waiting area," not a machine meant for staff. Bowie said he simply wiggled the mouse on the staff PC and saw it was still logged in with access to personal medical records, and that was that, whereas he admitted he did drop the ad-hoc surveillance code on the other box.
Court records show a warrant for Bowie's arrest was issued on April 14; Bowie insists he was never actually taken into custody. "I was never arrested," he said on LinkedIn, contradicting the [14]reports .
Bowie claimed on LinkedIn over the weekend the media has defamed him, causing reputational damage and business losses exceeding $12,000.
[15]
He further alleged FBI agents contacted him to discuss his AI services for tracking child predators online. According to his post, it was only during a later meeting — where he claims he was not read his rights — that agents brought up the hospital incident.
On LinkedIn, Bowie blamed the whole affair on being "in and out of psychosis" at the time. He said paranoia after an [16]IT security breach at a hospital in the SSM Health network, combined with mishandled mental health treatment during his stay in that network, led him to believe his data was unsafe.
[17]Up to $75M needed to fix up rural hospital cybersecurity as ransomware gangs keep scratching at the door
[18]Cops cuff man for allegedly framing colleague with AI-generated hate speech clip
[19]SSNs and more on 5.5M+ patients feared stolen from Yale Health
[20]US 'laptop farm' man accused of outsourcing his IT jobs to North Korea to fund weapons programs
"SSM's ransomware attacks around the time of my stay, along with mishandling of the discontinuation of a psychotropic drug, fueled the fear my/others PHI wasn't safe," Bowie said. "[I] absolutely wouldn't have touched a single device had my botched mental health treatment not induced delusions/paranoia."
In another comment, Bowie noted his mental health "doesn't excuse what happened," but that he felt it was important to add context to the matter. Several netizens commenting on his LinkedIn post noted that Bowie ought to not only stop replying to comments, but take the missive down and contact a lawyer ASAP. We reached out to Bowie with questions, naturally.
"If you represent a media organization and want a comment/piece, feel free to reach out and be ready with CashApp / Apple Cash," Bowie said at the end of his LinkedIn post. In line with standard journalistic ethics, we did not offer payment.
We have not heard back. ®
Updated to add on April 29
Bowie has insisted to us he turned himself in, and was not actually arrested. "At no point in time was I placed in handcuffs, read my Miranda rights, or was told 'you’re under arrest,'" Bowie claimed.
He added his CashApp request was sarcastic.
Bowie further explained he had taken to LinkedIn to "get the facts out ahead of potentially erroneous reporting," and that he wasn't concerned that his statements online would be used against him.
"I had a near 45-minute sit down, where I answered the Feds’ questions, and provided the same screenshots from my post to the FBI," Bowie told us. "Nothing in my post isn’t already on the video [they] recorded."
Bowie added that, in his present state of mind, he understands what he did was wrong, and accepts full responsibility.
"I am putting full faith in God and due process to bring the truth to light," Bowie told us in a direct message chat on LinkedIn.
Get our [21]Tech Resources
[1] https://www.oscn.net/dockets/GetCaseInformation.aspx?db=oklahoma&number=CF-2025-1711&cmid=4424909
[2] https://www.hipaajournal.com/cybersecurity-firm-ceo-charged-with-installing-malware-hospital-computer/
[3] https://www.koco.com/article/edmond-cybersecurity-ceo-accused-major-hack-at-hospital/64505584
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://www.linkedin.com/in/cybersecurity-dfir/
[8] https://www.bizapedia.com/ok/7alkaloids-llc.html
[9] https://www.google.com/search?q=7alkaloids&rlz=1C1RXQR_enUS1158US1158&oq=7alkaloids&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIHCAEQABjvBTIKCAIQABiABBiiBDIHCAMQABjvBTIKCAQQABiABBiiBDIKCAUQABiiBBiJBTIGCAYQRRg8MgYIBxBFGDzSAQgzMDQ5ajBqNKgCALACAQ&sourceid=chrome&ie=UTF-8
[10] https://en.wikipedia.org/wiki/Mitragyna_speciosa
[11] https://www.linkedin.com/feed/update/urn:li:activity:7321946981839310849/
[12] https://web.archive.org/web/20250428180745/https://www.linkedin.com/feed/update/urn:li:activity:7321946981839310849/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[14] https://www.news9.com/story/67ffa28e6eaaa2a639500f67/oklahoma-city-man-arrested-installing-malware-hospital-computers
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://www.beckershospitalreview.com/legal-regulatory-issues/ssm-health-navvis-reach-6-5m-data-breach-settlement/
[17] https://www.theregister.com/2025/03/06/rural_hospitals_cybersecurity/
[18] https://www.theregister.com/2024/04/25/ai_voice_arrest/
[19] https://www.theregister.com/2025/04/24/yale_new_haven_health_breach/
[20] https://www.theregister.com/2024/08/08/north_korea_laptop_farm_arrest/
[21] https://whitepapers.theregister.com/
Jeffrey Bowie, whom court [1]records indicate has been charged with two counts of violating Oklahoma's Computer Crimes Act, came under investigation after he was suspected of installing a software nasty on a computer at St Anthony's Hospital in August 2024.
According to [2]reports , Bowie was seen using both a computer for guests and a staff workstation at the hospital. When confronted by hospital employees, he said he needed to use the equipment while visiting a family member undergoing surgery. A forensic review is said to have [3]uncovered malware on one of the PCs, which was quickly removed and reported to authorities.
[4]
A St Anthony's representative told The Register the infection was addressed immediately and no patient information was accessed.
[5]
[6]
Bowie, who [7]identifies himself as the CEO of both a cybersecurity company in Edmond, Oklahoma, and a [8]company whose [9]description on a cached Google search result indicates it sells or sold [10]Kratom extracts, took to LinkedIn to explain himself.
In a [11]post ( [12]archived here in case the original is taken down), Bowie contested the accusations though ultimately admitted to writing and running software on one hospital system that took a screenshot every 20 minutes and sent it to a remote host.
[13]
He claimed the code was written "on the fly" using PowerShell on a "guest computer designated for patients in the waiting area," not a machine meant for staff. Bowie said he simply wiggled the mouse on the staff PC and saw it was still logged in with access to personal medical records, and that was that, whereas he admitted he did drop the ad-hoc surveillance code on the other box.
Court records show a warrant for Bowie's arrest was issued on April 14; Bowie insists he was never actually taken into custody. "I was never arrested," he said on LinkedIn, contradicting the [14]reports .
Bowie claimed on LinkedIn over the weekend the media has defamed him, causing reputational damage and business losses exceeding $12,000.
[15]
He further alleged FBI agents contacted him to discuss his AI services for tracking child predators online. According to his post, it was only during a later meeting — where he claims he was not read his rights — that agents brought up the hospital incident.
On LinkedIn, Bowie blamed the whole affair on being "in and out of psychosis" at the time. He said paranoia after an [16]IT security breach at a hospital in the SSM Health network, combined with mishandled mental health treatment during his stay in that network, led him to believe his data was unsafe.
[17]Up to $75M needed to fix up rural hospital cybersecurity as ransomware gangs keep scratching at the door
[18]Cops cuff man for allegedly framing colleague with AI-generated hate speech clip
[19]SSNs and more on 5.5M+ patients feared stolen from Yale Health
[20]US 'laptop farm' man accused of outsourcing his IT jobs to North Korea to fund weapons programs
"SSM's ransomware attacks around the time of my stay, along with mishandling of the discontinuation of a psychotropic drug, fueled the fear my/others PHI wasn't safe," Bowie said. "[I] absolutely wouldn't have touched a single device had my botched mental health treatment not induced delusions/paranoia."
In another comment, Bowie noted his mental health "doesn't excuse what happened," but that he felt it was important to add context to the matter. Several netizens commenting on his LinkedIn post noted that Bowie ought to not only stop replying to comments, but take the missive down and contact a lawyer ASAP. We reached out to Bowie with questions, naturally.
"If you represent a media organization and want a comment/piece, feel free to reach out and be ready with CashApp / Apple Cash," Bowie said at the end of his LinkedIn post. In line with standard journalistic ethics, we did not offer payment.
We have not heard back. ®
Updated to add on April 29
Bowie has insisted to us he turned himself in, and was not actually arrested. "At no point in time was I placed in handcuffs, read my Miranda rights, or was told 'you’re under arrest,'" Bowie claimed.
He added his CashApp request was sarcastic.
Bowie further explained he had taken to LinkedIn to "get the facts out ahead of potentially erroneous reporting," and that he wasn't concerned that his statements online would be used against him.
"I had a near 45-minute sit down, where I answered the Feds’ questions, and provided the same screenshots from my post to the FBI," Bowie told us. "Nothing in my post isn’t already on the video [they] recorded."
Bowie added that, in his present state of mind, he understands what he did was wrong, and accepts full responsibility.
"I am putting full faith in God and due process to bring the truth to light," Bowie told us in a direct message chat on LinkedIn.
Get our [21]Tech Resources
[1] https://www.oscn.net/dockets/GetCaseInformation.aspx?db=oklahoma&number=CF-2025-1711&cmid=4424909
[2] https://www.hipaajournal.com/cybersecurity-firm-ceo-charged-with-installing-malware-hospital-computer/
[3] https://www.koco.com/article/edmond-cybersecurity-ceo-accused-major-hack-at-hospital/64505584
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://www.linkedin.com/in/cybersecurity-dfir/
[8] https://www.bizapedia.com/ok/7alkaloids-llc.html
[9] https://www.google.com/search?q=7alkaloids&rlz=1C1RXQR_enUS1158US1158&oq=7alkaloids&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIHCAEQABjvBTIKCAIQABiABBiiBDIHCAMQABjvBTIKCAQQABiABBiiBDIKCAUQABiiBBiJBTIGCAYQRRg8MgYIBxBFGDzSAQgzMDQ5ajBqNKgCALACAQ&sourceid=chrome&ie=UTF-8
[10] https://en.wikipedia.org/wiki/Mitragyna_speciosa
[11] https://www.linkedin.com/feed/update/urn:li:activity:7321946981839310849/
[12] https://web.archive.org/web/20250428180745/https://www.linkedin.com/feed/update/urn:li:activity:7321946981839310849/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[14] https://www.news9.com/story/67ffa28e6eaaa2a639500f67/oklahoma-city-man-arrested-installing-malware-hospital-computers
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aBFL8TQbt4g4drLco6-5TAAAAQw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://www.beckershospitalreview.com/legal-regulatory-issues/ssm-health-navvis-reach-6-5m-data-breach-settlement/
[17] https://www.theregister.com/2025/03/06/rural_hospitals_cybersecurity/
[18] https://www.theregister.com/2024/04/25/ai_voice_arrest/
[19] https://www.theregister.com/2025/04/24/yale_new_haven_health_breach/
[20] https://www.theregister.com/2024/08/08/north_korea_laptop_farm_arrest/
[21] https://whitepapers.theregister.com/
Re: Alleged!
An_Old_Dog
More-precisely, self-proclaimed cybersecurity professional.
Potemkine!
According to reports, Bowie was seen using both a computer for guests and a staff workstation at the hospital.
Security 101: lock your computer when you go away
Select One or More of the Following
An_Old_Dog
[ ] Drumming up business ("Look, your computer has malware on it. My company can help you with that.")
[ ] Sampling his own product (Kratom Salvia extracts)
[ ] Delusions of grandeur (I [this guy, not me] am a 'cybersecurity expert'!)
[ ] Garbled Bart Simpson defence ("I didn't do it nobody saw me can't prove a thing. But if I did do it, it was because I was crazy and off my meds. But that's no excuse.")
Somebody help the boy
Steve Aubrey
Somebody tell the dude to stop digging. The hole's deep enough already.
Alleged!
Alleged cybersecurity professional