A hybrid surge protector for a network interface device (NID) is disclosed. The hybrid surge protector includes a fail-safe spring connected to the ground electrode of a three-electrode gas tube. Tabs on the fail-safe spring are held away from the gas-tube end electrodes by a fusible element. The hybrid surge protector also includes metal-oxide varistor elements (“MOVs”) in contact with the gas-tube end electrodes and with the ground electrode via an MOV spring. This arrangement provides for two initial paths to ground-one path from the gas-tube end electrodes to the ground electrode through the gas tube, and another from the gas-tube end electrodes to the ground electrode through the MOVs and the MOV spring. The dominant path to ground starts as the MOV ground path but switches to the gas-tube path as the gas tube becomes activated. Another path to ground via the fail-safe spring is also available should the gas tube overheat. A surge protection module that includes the hybrid surge protector is also disclosed.