A major children's hospital in Chicago finds itself grappling with the aftermath of a prolonged cyberattack, leaving medical staff disconnected from digital patient records and disrupting communication channels between parents and caregivers, according to a report by AP.
Officials at Lurie Children's Hospital disclosed that the institution is still reeling from the cyberattack that commenced over a week ago, prompting an investigation in collaboration with the FBI and other law enforcement agencies.
CHICAGO, ILLINOIS - FEBRUARY 07: Pedestrians walk past an entrance to the Lurie Children's Hospital on February 07, 2024 in Chicago, Illinois. The hospital's computer network has been offline for eight days following what is believed to be a cyberattack.
Lurie Shuts Down its Internal Systems
The hospital promptly shuttered its internal systems encompassing phone lines, email services, and medical databases following the discovery of the breach on Jan. 31.
Dr. Marcelo Malakooti, Lurie's chief medical officer, conveyed the gravity of the situation, emphasizing the hospital's engagement with external and internal experts in tandem with law enforcement agencies in a relentless effort to address the crisis.
He underscored the ongoing and active nature of the investigation, characterizing it as a matter of utmost seriousness.
Although not definitively confirmed by hospital authorities, the situation at Lurie Children's Hospital bears the hallmarks of a ransomware attack, a tactic favored by cybercriminal syndicates for its extortionate potential.
These entities typically encrypt crucial data or records, holding them hostage until a ransom is paid for release.
Hospitals' Vulnerability to Cyberattacks
Allan Liska, an analyst at cybersecurity firm Recorded Future, refrained from pinpointing specific criminal groups involved. Still, he told AP that the narrative provided by Lurie officials hints at the involvement of a well-known entity on the radar of U.S. law enforcement agencies.
"Even though we all know most hospitals with some exceptions don't have spare cash to pay a large ransom, they're much more aggressive than they used to be when going after health care providers," Liska said in a statement.
The FBI in Chicago declined to furnish additional details regarding the hospital's disclosures, directing inquiries to a previously issued statement affirming an ongoing investigation.
A report by the U.S. Department of Health and Human Services from 2023 underscored the escalating trend of criminal targeting of healthcare providers, disrupting care services for patients nationwide.
However, the threat landscape extends beyond healthcare, encompassing educational institutions, judicial bodies, utilities, and governmental entities.
In response to the cyber predicament, Lurie has advised patients to avail themselves of a designated call center, offering assistance with prescription refills, appointment inquiries, and communication with healthcare providers.
Dr. Malakooti acknowledged the frustration and anxiety engendered by the predicament among the community, expressing gratitude for the overwhelming support received while commending the resilience exhibited by the hospital's workforce in upholding its mission.
Nonetheless, some parents have voiced dissatisfaction with the center's responsiveness, expressing uncertainty regarding the timeline for resolving their queries and concerns.
Related Article: 911 Calls in Chicago Will Start Getting Mental Health Clinicians Instead of Cops | Public Health Approach
