Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Incident Response

Alabama Hospital System Halts Admissions Amid Malware Attack

A hospital system that serves a large part of rural west Alabama temporarily quit accepting new patients after a ransomware attack crippled some of its computer systems Tuesday.

A hospital system that serves a large part of rural west Alabama temporarily quit accepting new patients after a ransomware attack crippled some of its computer systems Tuesday.

Brad Fisher, a spokesman for DCH Health System, said its hospitals in Tuscaloosa, Northport and Fayette began diverting most new patients to Birmingham and elsewhere after the attack became apparent in the pre-dawn hours.

The most critically ill new patients were still being treated, he said, and officials didn’t anticipate having to discharge patients because of the attack.

Ransomware software made it impossible for some computer systems to communicate with each other, but no patient data was believed to be lost, Fisher said. Medical staff members had to use paper copies in place of digitized records.

“Your nurse can chart on you and that information is still there,” he said. “But things like being able to take images and making them available to be read, that sort of thing … has been truncated.”

It was unclear how much money the hackers were demanding to relinquish control, but both the FBI and Secret Service were contacted and federal agents were on the way, he said.

The three hospitals have about 850 beds total and admitted more than 32,000 patients last year. Surgeries were being performed as normal, and a decision would be made on what to do about procedures set for Wednesday and later, Fisher said.

Ransomware typically involved hackers installing malicious software on a computer network and demanding money in exchange for releasing information. Such attacks have become much more common since cryptocurrency made it easier for hackers to receive and spend money.

Advertisement. Scroll to continue reading.

Fisher said it wasn’t clear how the hospitals’ common computer system was attacked.

RelatedMedical Practice Closing Permanently After Ransomware Attack

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Bill Dunnion has joined telecommunications giant Mitel as Chief Information Security Officer.

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

Incident Response

Microsoft has rolled out a preview version of Security Copilot, a ChatGPT-powered tool to help organizations automate cybersecurity tasks.

Data Breaches

GoTo said an unidentified threat actor stole encrypted backups and an encryption key for a portion of that data during a 2022 breach.

Application Security

GitHub this week announced the revocation of three certificates used for the GitHub Desktop and Atom applications.

Incident Response

Meta has developed a ten-phase cyber kill chain model that it believes will be more inclusive and more effective than the existing range of...

Cloud Security

VMware described the bug as an out-of-bounds write issue in its implementation of the DCE/RPC protocol. CVSS severity score of 9.8/10.