A cybersecurity breach affecting Ascension, one of the largest healthcare systems in the United States, has disrupted operations at 140 hospitals serving communities in 19 states and the District of Columbia. The attack forced many of Ascension’s 35,000 physicians and 135,000 staff members to revert to manual processes like writing notes and updating patient charts by hand.
First detected on May 8, the ransomware attack compromised multiple technology systems, including the electronic health records that patients use to schedule procedures, view lab results, and refill medications. Phone systems have also been affected, forcing many providers to deliver orders for tests and prescriptions in person.
The Full Scope of the Attack
All of Ascension’s facilities remain open, but a representative admitted that, in some cases, emergency patients have been triaged to different hospitals. Many non-emergency appointments and elective procedures have been postponed, and some Ascension pharmacies have seen significant disruptions.
Individuals enrolled in the company’s health insurance plans have been advised to mail their checks for monthly premiums while electronic payment systems are down. And though there’s no indication yet that patient data has been compromised, cybersecurity experts expect that sensitive information will eventually turn up on the dark web.
As of May 20, Ascension had not reported a timeline for when day-to-day operations might return to normal. The company said it was working with “industry-leading cybersecurity experts” to investigate the ransomware attack and restore affected systems, while the FBI and Cybersecurity and Infrastructure Security Agency (CISA) confirmed their involvement in the investigation.
A Rising Threat
The Ascension attack follows other high-profile cybersecurity breaches on American healthcare companies. According to recent research, ransomware attacks on healthcare systems more than doubled between 2016 and 2021, compromising the private health information of nearly 42 million people.
Earlier this year, Change Healthcare, owned by UnitedHealth, suffered a major ransomware attack. This breach exposed millions of Americans’ health data, delayed healthcare claims processing, and disrupted prescription services. Last month, federal lawmakers grilled UnitedHealth’s CEO during a Senate hearing; he revealed that the company didn’t have adequate cybersecurity protections like multi-factor authentication in place to prevent such an attack.
Negative impacts from the Change Healthcare attack continue to reverberate across the American healthcare system. The American Hospital Association reported that 94% of hospitals surveyed experienced a financial impact, with many still struggling to get claims submitted and paid as of late April.
The U.S. Department of Health and Human Services has stepped up to try and help. Last week, before the Ascension story broke, HHS announced it would invest more than $50 million in a cybersecurity toolkit to help hospitals better defend themselves against cybersecurity threats.
What Else Can Businesses Do to Protect Themselves?
As ransomware attacks targeting businesses increase in frequency and severity, it’s time to strengthen cybersecurity measures. CMIT Solutions has compiled a few tips to help you stay safe and protect your company.
The recent ransomware attack on Ascension serves as a stark reminder of the critical need for comprehensive cybersecurity protection. As cyberthreats continue to evolve, businesses in every industry must proactively enhance their defenses to protect sensitive data and maintain operational integrity.
CMIT Solutions specializes in comprehensive security strategies that help businesses protect themselves from increasingly sophisticated attacks. If you’re worried about ransomware attacks or concerned about the rise in threats to the healthcare sector, contact us today.
A handsome, 2-year-old boy who is looking for someone to play and go on adventures…
Here are a few tips on how to get yourself and your family back in…
What you need to know about upcoming QuickBooks changes
Essential steps to protect your data after a breach
A sweet, 2-year-old boy who is looking to fill your life with adventure
Chad and Aalia Scott hosted their first back-to-school supply drive
This website uses cookies.