{"id":58589,"date":"2018-01-15T11:03:44","date_gmt":"2018-01-15T17:03:44","guid":{"rendered":"https:\/\/www.pcmatic.com\/blog\/?p=58589"},"modified":"2018-01-16T12:16:08","modified_gmt":"2018-01-16T18:16:08","slug":"indiana-hospital-ransomware","status":"publish","type":"post","link":"https:\/\/www.pcmatic.com\/blog\/indiana-hospital-ransomware\/","title":{"rendered":"Indiana Hospital Resorts to Paper Filing After Ransomware Takes Down Systems"},"content":{"rendered":"
\n

Update, 1\/16\/2018: Hancock Regional Hospital ended up paying the ransom demand of $55,000.\u00a0 Officials are still reporting<\/a> patient data was not breached.\u00a0 Officials did report the 1,400 files that were ecrypted were backed up, and could have been replaced.\u00a0 Although, they believed it would be more cost effective to pay the ransom demands to regain system accessibility and functionality in a faster manner.\u00a0 After receiving the decryption keys, systems were back up and running.\u00a0 However, there are still a few glitches in the system which are projected to be fixed in upcoming weeks.<\/em><\/p>\n

\n

Indiana Hospital is Latest Ransomware Victim<\/h4>\n

Hancock Regional Hospital, located in Greenfield, Indiana reported a ransomware attack that infected their systems on January 11th.\u00a0 Although the staff identified an issue immediately, the malware was still able to infect the email systems, internal operating systems and health care records.\u00a0 However, hospital officials have reported<\/a> no security breaches at this time.<\/p>\n

After encrypting the facility’s systems, the cyber criminals demanded a payment in bitcoin.\u00a0 The amount however, is not being disclosed.\u00a0 At this time, the hospital’s systems remain down.\u00a0 Despite the ransomware attack, Hancock Regional Hospital remains open, and employees are using paper records until the systems are functional.<\/p>\n

Below is the official statement<\/a> from Hancock Regional Hospital,<\/p>\n

“Hancock Regional Hospital has been the victim of a criminal act by an unknown party that attempted to shut down out operations via our information systems by locking our computer network and demanding payment for a digital key to unlock it. Unfortunately, this sort of behavior is widespread in the world today, and we had the misfortune to be next on the list. We are working closely with an IT incident response company and national law enforcement. At this time, we are deep into the analysis of the situation and see no indication that patient records have been removed from our network. In addition to excellent performance by our IT Department, our clinical teams have performed exceptionally well, and patient care has not been compromised. Our doors are open at Hancock Regional Hospital.”<\/p><\/blockquote>\n

Other Ransomware Attacks<\/h4>\n

We have also created a map, see below, of the ransomware attacks that have taken place in the U.S.
\n