A Vermont-based hospital network is now saying a cyberattack that crippled its computer systems in October was ransomware.
While the Burlington-based University of Vermont Health Network, which serves hospitals in Vermont and upstate New York, had said its systems were attacked on Oct. 28, officials had not confirmed the attack that disabled the system’s 600 applications was ransomware.
On Tuesday, hospital officials said its information technology workers found a file directing them to contact the attackers if they wanted their systems restored, but it did not contain a request for money.
“We considered it for about five seconds,” said Doug Gentile, the chief information officer for the UVM Health Network.
The hospital contacted the FBI, which is continuing to investigate.
Since the attack, the hospital has been rebuilding all 1,300 of its servers and restoring the backups. They say no patient data was affected and they hope the system can be fully restored by early next month.
The hospital said that before the attack they had strong security measures in place, but the attackers still found a way in.
“It’s become clear, really this is an arms race. I think you’ve all seen in the news some of the recent sophistication of cyberattacks that are being launched and it’s really just going to continue,” Gentile said. “So, we all have to stay vigilant. We all are going to continually have to update our tools and our approaches to try to stay ahead of the bad guys in this situation.”
The same day as the attack on UVM Health Network, the FBI and two federal agencies warned cybercriminals were ramping up efforts to steal data and disrupt services across the health care sector.
Related: Vermont Hospital Cyberattack Cost Estimated at $1.5M a Day

More from Associated Press
- Researchers Discover Attempt to Infect Leading Egyptian Opposition Politician With Predator Spyware
- UK’s New Online Safety Law Adds to Crackdown on Big Tech Companies
- MGM Resorts Computers Back Up After 10 Days as Analysts Eye Effects of Casino Cyberattacks
- California Law Restricting Companies’ Use of Information From Kids Online Is Halted by Federal Judge
- Two Vegas Casinos Fell Victim to Cyberattacks, Shattering the Image of Impenetrable Casino Security
- TikTok Is Hit With $368 Million Fine Under Europe’s Strict Data Privacy Rules
- Imagine Making Shadowy Data Brokers Erase Your Personal Info. Californians May Soon Live the Dream
- California Settles With Google Over Location Privacy Practices for $93 Million
Latest News
- Russian Zero-Day Acquisition Firm Offers $20 Million for Android, iOS Exploits
- Sysdig Launches Realtime Attack Graph for Cloud Environments
- Google Rushes to Patch New Zero-Day Exploited by Spyware Vendor
- Chinese Gov Hackers Caught Hiding in Cisco Router Firmware
- CISA Unveils New HBOM Framework to Track Hardware Components
- Gem Security Lands $23 Million Series A Funding
- Misconfigured TeslaMate Instances Put Tesla Car Owners at Risk
- Firefox 118 Patches High-Severity Vulnerabilities
