Three weeks after a cyberattack led to a network outage at Scripps Well being, workers say some techniques are coming again on-line.
Based on reporting from ABC News, a number of Scripps Well being employees stated they’d regained entry to “read-only” medical information from earlier than Could and payroll techniques, together with some computer systems, emails and X-rays.
Its Epic-powered affected person portal, MyScripps, was nonetheless down as of Thursday.
“Whereas some options on our web site are nonetheless being labored on and aren’t fairly prepared to be used but, most of scripps.org is again up and operating,” stated the well being system in an replace on the Fb web page.
Makes an attempt to achieve the group by cellphone and e mail for remark weren’t profitable.
WHY IT MATTERS
After detecting a safety incident on Could 1, Scripps suspended consumer entry to its IT purposes.
The San Diego-based well being system continues to maintain mum in regards to the specifics of the assault.
In an announcement posted to the web site, Scripps stated, “In response to the cyber safety incident on Could 1, our group instantly took steps to comprise the malware by taking a good portion of our community offline.”
“We additionally instantly engaged outdoors consultants and consultants to help us in our investigation and different consultants to assist us restore our techniques and get again on-line as quickly as doable,” the group added.
The breadth of probably uncovered private data stays unclear, Scripps stated.
“The investigation into the scope of the incident, together with whether or not knowledge was probably affected, stays ongoing,” the assertion stated.
“Relying on the investigation’s findings, we’ll remember to present notifications to affected people in accordance with all relevant legal guidelines,” it continued.
The assertion reiterated that in-person care was nonetheless accessible, and that sufferers may and may affirm appointments through cellphone. It famous that the Scripps group had backup workflows and paper processes in place, and that care suppliers presently had “view-access” to affected person historical past and information. Digital visits had been additionally nonetheless accessible.
“Doctor and employees management at every web site are reviewing scheduled surgical procedures, infusions, imaging, lab and all different affected person care companies repeatedly. If sure companies and appointments have to be rescheduled, we’re reaching out to sufferers straight when doable,” learn the assertion.
It suggested that requests for medical information needs to be accomplished by mail.
THE LARGER TREND
Some cybersecurity consultants speculated that the network outage was associated to negotiations round ransomware.
“It’s doubtless that it’s taking a very long time due to negotiations occurring with the perpetrators, and the prevailing narrative is that they’ve the contents of the digital well being information system which are getting used for ‘double extortion,'” stated Michael Hamilton, former chief data safety officer for town of Seattle and CISO of healthcare cybersecurity agency CI Safety, in an e mail to Healthcare IT Information.
If that is true, Scripps actually would not be alone: The healthcare business noticed a variety of high-profile ransomware incidents within the final yr, together with a cyberattack on Common Well being Companies that led to a lengthy network shutdown and a $67 million loss.
Extra not too long ago, prospects of the digital well being document vendor Aprima additionally reported weeks of security-related outages.
ON THE RECORD
“Scripps has served this group for 100 years,” stated the well being system within the web site assertion. “We are going to come by way of this. We’re right here for you, now. And we might be right here for generations of sufferers to return. Thanks once more in your persistence and understanding throughout this difficult time.”
Kat Jercich is senior editor of Healthcare IT Information.
Twitter: @kjercich
E-mail: kjercich@himss.org
Healthcare IT Information is a HIMSS Media publication.
