MedStar Health

MedStar Health, a healthcare provider, had faced ransomware attack which targeted some of its computer servers.

The compromised data included name, address, date of birth, and for a limited number of individuals, Social Security number, some critical files.

FBI investigated the incident and took down all system interfaces to prevent the virus from spreading throughout the organization.

They paid thousands of dollars to extortionists for the safe recovery of encrypted data.

Source: https://www.tripwire.com/state-of-security/featured/ransomware-forces-hospitals-to-shut-down-network-resort-to-paper/

TPRM report: https://www.rankiteo.com/company/medstar-health

"id": "med93219522",
"linkid": "medstar-health",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'MedStar Health',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['PII']},
 'description': 'MedStar Health, a healthcare provider, faced a ransomware '
                'attack which targeted some of its computer servers. The '
                'compromised data included name, address, date of birth, and '
                'for a limited number of individuals, Social Security number, '
                'some critical files. FBI investigated the incident and took '
                'down all system interfaces to prevent the virus from '
                'spreading throughout the organization. They paid thousands of '
                'dollars to extortionists for the safe recovery of encrypted '
                'data.',
 'impact': {'data_compromised': ['name',
                                 'address',
                                 'date of birth',
                                 'Social Security number',
                                 'some critical files'],
            'systems_affected': ['computer servers']},
 'investigation_status': 'Investigated by FBI',
 'motivation': 'Financial Gain',
 'ransomware': {'data_encryption': 'Yes',
                'ransom_demanded': 'Yes',
                'ransom_paid': 'Yes'},
 'response': {'containment_measures': ['Took down all system interfaces to '
                                       'prevent the virus from spreading'],
              'law_enforcement_notified': 'Yes',
              'recovery_measures': ['Paid thousands of dollars to '
                                    'extortionists for the safe recovery of '
                                    'encrypted data']},
 'title': 'Ransomware Attack on MedStar Health',
 'type': 'Ransomware'}