A system for detecting potentially suspicious motion of a piece of equipment in a healthcare establishment. The system comprises a first functional entity adapted to determine a set of authorized clinicians associated with the piece of equipment; a second functional entity adapted to determine, based at least in part on data regarding wirelessly detectable tags associated with the authorized clinicians and the piece of equipment, when the piece of equipment is in motion and satisfies a remoteness condition with respect to a subset of the authorized clinicians; and a third functional entity adapted to signal potentially suspicious motion of the piece of equipment in response to the piece of equipment being in motion and satisfying the remoteness condition with respect to the subset of the authorized clinicians. In this way, it may be possible to thwart an attempted theft of equipment.