Skip to content
NOWCAST KOCO 10:30pm-11pm Sunday Night
Live Now
Advertisement

Cyberattack forces major US health care network to divert ambulances from hospitals

Cyberattack forces major US health care network to divert ambulances from hospitals
DISASTER STATUS. 75% OF THE VISITS TO THE EMERGENCY DEPARTMENT AT SAINT AGNES ARE WALK INS. SAINT AGNES HOSPITAL OFFICIALS ARE ASKING PEOPLE WHO NEED TO VISIT AN EMERGENCY DEPARTMENT TO CHOOSE ANOTHER HOSPITAL WHILE THEY ARE HAVING DIFFICULTY WITH THEIR TECHNOLOGY SYSTEMS DUE TO THE SUSPECTED CYBERATTACK ATTACK WEDNESDAY, AND SO THE HOSPITAL REQUESTED THAT TO THE EXTENT POSSIBLE, WE DIVERT EMS TRAFFIC AWAY FROM THEM TO OTHER NEARBY HOSPITALS. ASCENSION ISSUED A STATEMENT WRITING AT THIS TIME, WE CONTINUE TO INVESTIGATE THE SITUATION. WE RESPONDED IMMEDIATELY. INITIALLY, OUR INVESTIGATION AND ACTIVATED OUR REMEDIATION EFFORTS. ACCESS TO SOME SYSTEMS HAVE BEEN INTERRUPTED AS THIS PROCESS CONTINUES. DOCTOR TED DELBRIDGE IS EXECUTIVE DIRECTOR OF THE MARYLAND INSTITUTE FOR EMERGENCY MEDICAL SERVICES. THERE ARE INFORMATION TECHNOLOGY CHALLENGES OVER THE PAST 24 HOURS HAVE MADE THEM HAVE TO RESORT TO PAPER PROCESSES AND AND STAFF HAVEN’T HAD TO DO THAT FOR QUITE SOME TIME. AND SO GETTING PEOPLE SPOOLED UP TO DO THINGS ESSENTIALLY THE WAY THEY USED TO DO THEM IS TAKING THEM SOME TIME AND MADE THE HOSPITAL, UH, ACCORDING TO THEIR LEADERSHIP. UH, QUITE A BIT MORE INEFFICIENT THAN THEY TYPICALLY WOULD BE. SAINT AGNES SAYS IT WILL NOT TURN ANY PATIENT AWAY. IF I HAD KNOWLEDGE OF THEIR CHALLENGE RIGHT NOW, AND I HAD A CHOICE TO GO SOMEPLACE ELSE, I WOULD CHOOSE TO GO SOMEPLACE ELSE. IF I HAD A COMPELLING REASON TO GO TO SAINT AGNES. BECAUSE I’M GETTING I’M SEEKING FOLLOW UP TO CARE THAT I HAD THERE BEFORE, OR BECAUSE I HAVE A RELATIONSHIP WITH THE MEDICAL STAFF. THERE OR OR IT’S A TRUE EMERGENCY AND THERE’S ABSOLUTELY, POSITIVELY THE CLOSEST PLACE I WOULD GO THERE IN A HEARTBEAT
Advertisement
Cyberattack forces major US health care network to divert ambulances from hospitals
A major U.S. health care system said Thursday that it is diverting ambulances from "several" of its hospitals following a cyberattack this week.The cyberattack on Ascension, a St. Louis-based nonprofit network that includes 140 hospitals in 19 states, is also disrupting access to electronic health records, some phone systems and "various systems utilized to order certain tests, procedures and medications," Ascension said in a statement distributed Thursday evening.The sprawling health care network, which also owns 40 senior living facilities, said that it would be using "downtime procedure for some time," because of the cyberattack. Downtime procedures are typically when health providers revert to backup processes, including paper records, that allow them to care for patients when computers are down.Four sources briefed on the investigation told CNN that Ascension suffered a ransomware attack, in which cybercriminals typically try to lock computers and steal data for extortion. Those sources said that the type of ransomware used in the hack is known as Black Basta, which hackers have used repeatedly to attack health care organizations in recent years. Black Basta’s broad criminal group includes Russian-speakers, according to the Department of Health and Human Services.News of the hack of Ascension broke on Wednesday, and Ascension has, in the last 24 hours, followed a familiar playbook for many American organizations that have been assaulted by cybercriminals. Ascension has notified federal authorities of the incident, hired prominent U.S. cybersecurity firm Mandiant to recover from the incident and shut down systems to try to keep the incident under control.Senior U.S. officials have been in repeated contact with Ascension CEO Joseph Impicciche since the ransomware attack to understand how the hack might impact patient care, two sources familiar with the matter told CNN."We are actively supporting our ministries as they continue to provide safe, patient care with established downtime protocols and procedures, in which our workforce is well trained," Ascension said in its statement Thursday evening.It was not clear how many Ascension hospitals were sending ambulances to other locations because of the cyberattack. Ascension spokesperson Gene Ford did not respond to calls and emails seeking comment.It’s only the latest major hacking incident that has hobbled a big U.S. health care network and sent U.S. officials scrambling to offer support.A February ransomware attack on Change Healthcare, a subsidiary of health care giant UnitedHealth Group, caused billing disruptions at pharmacies across the U.S. and threatened to put some health providers out of business. A third of Americans may have had their personal data swept up in the hack, UnitedHealth CEO Andrew Witty estimated in testimony to Congress this month. UnitedHealth paid a $22 million ransom to the cybercriminals to try to protect patient data, Witty said.That Change Healthcare hack incensed U.S. lawmakers and prompted questions across the federal government about the vulnerability of America’s health care system to disruptive cyberattacks with cascading impacts – questions that the cyberattack on Ascension will do nothing to assuage.

A major U.S. health care system said Thursday that it is diverting ambulances from "several" of its hospitals following a cyberattack this week.

The cyberattack on Ascension, a St. Louis-based nonprofit network that includes 140 hospitals in 19 states, is also disrupting access to electronic health records, some phone systems and "various systems utilized to order certain tests, procedures and medications," Ascension said in a statement distributed Thursday evening.

Advertisement

The sprawling health care network, which also owns 40 senior living facilities, said that it would be using "downtime procedure for some time," because of the cyberattack. Downtime procedures are typically when health providers revert to backup processes, including paper records, that allow them to care for patients when computers are down.

Four sources briefed on the investigation told CNN that Ascension suffered a ransomware attack, in which cybercriminals typically try to lock computers and steal data for extortion. Those sources said that the type of ransomware used in the hack is known as Black Basta, which hackers have used repeatedly to attack health care organizations in recent years. Black Basta’s broad criminal group includes Russian-speakers, according to the Department of Health and Human Services.

News of the hack of Ascension broke on Wednesday, and Ascension has, in the last 24 hours, followed a familiar playbook for many American organizations that have been assaulted by cybercriminals. Ascension has notified federal authorities of the incident, hired prominent U.S. cybersecurity firm Mandiant to recover from the incident and shut down systems to try to keep the incident under control.

Senior U.S. officials have been in repeated contact with Ascension CEO Joseph Impicciche since the ransomware attack to understand how the hack might impact patient care, two sources familiar with the matter told CNN.

"We are actively supporting our ministries as they continue to provide safe, patient care with established downtime protocols and procedures, in which our workforce is well trained," Ascension said in its statement Thursday evening.

It was not clear how many Ascension hospitals were sending ambulances to other locations because of the cyberattack. Ascension spokesperson Gene Ford did not respond to calls and emails seeking comment.

It’s only the latest major hacking incident that has hobbled a big U.S. health care network and sent U.S. officials scrambling to offer support.

A February ransomware attack on Change Healthcare, a subsidiary of health care giant UnitedHealth Group, caused billing disruptions at pharmacies across the U.S. and threatened to put some health providers out of business. A third of Americans may have had their personal data swept up in the hack, UnitedHealth CEO Andrew Witty estimated in testimony to Congress this month. UnitedHealth paid a $22 million ransom to the cybercriminals to try to protect patient data, Witty said.

That Change Healthcare hack incensed U.S. lawmakers and prompted questions across the federal government about the vulnerability of America’s health care system to disruptive cyberattacks with cascading impacts – questions that the cyberattack on Ascension will do nothing to assuage.