Family Health West Hospital in Fruita was targeted by a cyberattack on Tuesday, forcing a shutdown of its electronic systems. While patient care remained uninterrupted due to manual operations, the hospital confirmed no evidence of patient or employee data being lost or encrypted, with all attack attempts successfully blocked. The IT department is conducting forensic reviews and engaging external cybersecurity experts to verify system security before restoring operations. The incident was isolated, with no impact on other Mesa County hospitals. Proactive measures, such as disconnecting shared services (e.g., radiology), were taken by neighboring facilities like Community Hospital to prevent spread. The attack follows a prior disruption from the February 2024 Change Healthcare breach, which had caused prolonged financial losses for thousands of hospitals, including Family Health West. Recovery timelines and full threat elimination remain uncertain, with updates to be provided as needed. The hospital emphasized its focus on safeguarding sensitive patient, staff, and community data.
TPRM report: https://www.rankiteo.com/company/family-health-west
"id": "fam2232222102925",
"linkid": "family-health-west",
"type": "Cyber Attack",
"date": "2/2024",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'healthcare',
'location': 'Fruita, Colorado, USA',
'name': 'Family Health West Hospital',
'type': 'hospital'}],
'customer_advisories': ['public assurance of no data loss or encryption, '
'updates to be provided as necessary'],
'date_detected': '2024-09-10T00:00:00Z',
'date_publicly_disclosed': '2024-09-10T00:00:00Z',
'description': 'On Tuesday morning, Family Health West Hospital in Fruita '
'discovered it was the target of a cyberattack. The attack '
'forced the hospital to shut down its electronic systems, but '
'patient care was not impacted due to manual operations by '
'staff. As of Tuesday afternoon, there was no evidence of lost '
'or encrypted patient or employee data, and all attempts '
'appeared to have been successfully blocked. The hospital’s IT '
'department is isolating systems for forensic review and '
'engaging external cybersecurity experts for double-checking '
'before restoring systems. The incident was isolated and did '
'not affect other hospitals in Mesa County. Proactive measures '
'were taken by Community Hospital to prevent the attack from '
'spreading, including disconnecting shared services like '
'radiology. The hospital’s prior experience with the February '
'2024 Change Healthcare cyberattack may have influenced their '
'expedient response.',
'impact': {'operational_impact': ['manual operations implemented',
'electronic systems shutdown',
'forensic review of isolated systems'],
'systems_affected': ['electronic systems (shut down as '
'precaution)']},
'investigation_status': 'ongoing (forensic review in progress, threat not yet '
'fully eliminated)',
'references': [{'date_accessed': '2024-09-10T00:00:00Z',
'source': 'Family Health West Hospital Press Release'},
{'date_accessed': '2024-05-01T00:00:00Z',
'source': 'The Sentinel (May 2024 report on Change Healthcare '
'cyberattack)'}],
'response': {'communication_strategy': ['press release',
'spokesperson statements',
'planned updates as necessary'],
'containment_measures': ['shutdown of electronic systems',
'isolation of systems for forensic '
'review'],
'incident_response_plan_activated': True,
'network_segmentation': ['disconnection of shared services '
'(e.g., radiology) with Community '
'Hospital'],
'recovery_measures': ['gradual restoration of systems after '
'confirmation of security'],
'remediation_measures': ['forensic review by IT department',
'double-checking by external '
'cybersecurity experts'],
'third_party_assistance': ['external cybersecurity experts']},
'stakeholder_advisories': ['press release',
'spokesperson statements (Derek Biddle, Chris '
'Thomas)'],
'title': 'Cyberattack on Family Health West Hospital in Fruita',
'type': ['cyberattack', 'potential ransomware (unconfirmed)']}