Cybercrime

Hospital Chain Says ‘IT Security Issue’ Disrupts Operations

A major nonprofit health system with 140 hospitals in 21 states, CommonSpirit Health, is reporting an “IT security issue” that has disrupted operations in multiple states.

A company spokesperson would not explain the nature of the apparent cyberattack, such as whether the organization’s IT network was hit by ransomware.

Associated Press

October 6, 2022

A major nonprofit health system with 140 hospitals in 21 states, CommonSpirit Health, is reporting an “IT security issue” that has disrupted operations in multiple states.

A company spokesperson would not explain the nature of the apparent cyberattack, such as whether the organization’s IT network was hit by ransomware.

The Des Moines Register said the incident occurred Monday and forced the diversion of ambulances from the emergency department of the city’s Mercy One Medical Center to other medical facilities. The Chattanoogan reported that CHI Memorial Hospital was among facilities impacted.

In a statement Tuesday, CommonSpirit said it had taken “certain IT systems offline” including electronic health records as a precaution and rescheduled some patient appointments. It would not say whether patient records were accessed. Nor did it say when the apparent breach was detected.

The Chicago company, formed in 2019 from the alignment of Catholic Health Initiatives and Dignity Health, serves 20 million Americans with more than 1,000 care sites located coast-to-coast.

Health care is classified by the U.S. government as one of 16 critical infrastructure sectors, and health care providers are seen as ripe targets for hackers.

If patient data is accessed, health care providers are required by law to notify the Department of Health and Human Services.

Written By Associated Press

Latest News

Click to comment

Mapping Threat Intelligence to the NIST Compliance Framework Part 2

How threat intelligence is critical when justifying budget for GRC personnel, and for threat intelligence, incident response, security operations and CISO buyers.

Landon Winkelvoss

Password Dependency: How to Break the Cycle

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the password dependency cycle. But how can this be done?

Torsten George

Why CISOs Make Great Board Members

Cybersecurity-related risk is a top concern, so boards need to know they have the proper oversight in place. Even as first-timers, successful CISOs make for successful board members.

Galina Antova

A Change in Mindset: From a Threat-based to Risk-based Approach to Security

A threat-based approach to security often focuses on a checklist to meet industry requirements but overlooked the key component of security: reducing risk.

Marie Hattar