Ransomware Attacks Disrupt Hospitals in the US and Australia
A series of ransomware attacks has severely impacted healthcare operations in the United States and Australia, forcing hospitals to divert patients and cancel appointments. In Alabama, three hospitals DCH Regional Medical Center in Tuscaloosa, Fayette Medical Center, and Northport Medical Center were hit by ransomware on 1 October, leading to the temporary closure of their systems to all but critical new patients. Outpatient appointments were advised to be confirmed by phone before attendance, while elective surgeries scheduled for 2 October proceeded as planned. The operator, DCH Health System, warned that full recovery could take weeks.
Meanwhile, in Australia, seven hospitals in Gippsland and southwest Victoria experienced similar disruptions, with some elective surgeries and appointments canceled. The Victorian Government Cyber Incident Response Service reported over 600 cyberattacks since July 2018, though the specific group behind the latest ransomware incidents remains unidentified. Hospitals in Victoria reverted to manual systems where possible to maintain services, though patient records and booking systems were affected.
Cybersecurity experts, including UK-based specialist Kevin Beaumont, noted that ransomware groups are becoming increasingly sophisticated, targeting organizations with the intent to extort payments. The attacks highlight vulnerabilities in healthcare IT infrastructure, where disruptions can directly impact patient care. No ransom demands have been publicly disclosed in either case.
Source: https://www.bbc.com/news/technology-49905226
DCH Health System cybersecurity rating report: https://www.rankiteo.com/company/dch-health-system
"id": "DCH1781267955",
"linkid": "dch-health-system",
"type": "Ransomware",
"date": "10/2019",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Tuscaloosa, Alabama, US',
'name': 'DCH Regional Medical Center',
'type': 'Hospital'},
{'industry': 'Healthcare',
'location': 'Fayette, Alabama, US',
'name': 'Fayette Medical Center',
'type': 'Hospital'},
{'industry': 'Healthcare',
'location': 'Northport, Alabama, US',
'name': 'Northport Medical Center',
'type': 'Hospital'},
{'industry': 'Healthcare',
'location': 'Gippsland and southwest Victoria, '
'Australia',
'name': 'Seven hospitals in Gippsland and southwest '
'Victoria',
'type': 'Hospital'}],
'customer_advisories': 'Outpatient appointments advised to be confirmed by '
'phone; elective surgeries proceeded as planned (US). '
'Some elective surgeries and appointments canceled '
'(Australia).',
'data_breach': {'data_encryption': 'Yes (ransomware)'},
'date_detected': '2019-10-01',
'description': 'A series of ransomware attacks has severely impacted '
'healthcare operations in the United States and Australia, '
'forcing hospitals to divert patients and cancel appointments. '
'In Alabama, three hospitals were hit by ransomware, leading '
'to temporary closure of systems. In Australia, seven '
'hospitals in Gippsland and southwest Victoria experienced '
'disruptions, with elective surgeries and appointments '
'canceled.',
'impact': {'brand_reputation_impact': 'High',
'downtime': 'Weeks (estimated for full recovery)',
'operational_impact': 'Patient diversions, canceled appointments '
'and elective surgeries, manual system '
'fallback',
'systems_affected': 'Hospital IT systems, patient records, booking '
'systems'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Healthcare IT infrastructure vulnerabilities can directly '
'impact patient care. Ransomware groups are becoming '
'increasingly sophisticated in targeting organizations for '
'extortion.',
'motivation': 'Extortion',
'post_incident_analysis': {'root_causes': 'Vulnerabilities in healthcare IT '
'infrastructure'},
'ransomware': {'data_encryption': 'Yes'},
'recommendations': 'Enhance cybersecurity measures, improve incident response '
'planning, and invest in resilient IT infrastructure for '
'healthcare providers.',
'references': [{'source': 'Cybersecurity expert Kevin Beaumont'},
{'source': 'Victorian Government Cyber Incident Response '
'Service'}],
'response': {'communication_strategy': 'Public advisories for outpatient '
'appointments and elective surgeries',
'containment_measures': 'Systems temporarily closed to all but '
'critical new patients, manual system '
'fallback'},
'title': 'Ransomware Attacks Disrupt Hospitals in the US and Australia',
'type': 'Ransomware'}