$67 Million: Bottom-Line Impact of a Cyber Attack

Ransomware attack resulted in EHR outages at all 400 care sites for about three weeks

By By Dan Hounsell


The numbers are staggering.

Healthcare data breaches in 2020 totaled 599, up 55.1 percent from 2019. An unauthorized individual gained access to two employees' email accounts for a Michigan health system, potentially exposing about 45,000 patients' information. But what about the cost? What is the bottom-line impact of a cyber attack? One health system has put a dollar amount to such an attack.

The ransomware attack that resulted in electronic health record (EHR) outages at all 400 Universal Healthcare Services (UHS) care sites for about three weeks last year resulted in about $67 million in lost operating income, labor expenses, and overall recovery costs, according to Health IT Security.

UHS was among the first hit with the coordinated ransomware wave that targeted the healthcare sector in the fall. After the attack, UHS clinicians and staff members took to Reddit to determine if other UHS employees across the country were experiencing similar computer and phone outages. The thread detailed internet and data center outages, with one employee attributing the incident to a ransomware attack after seeing ransom messages from the Ryuk hacking group displayed on some computer screens.

As a result of the disruption to standard operating procedures, some patient activity, including ambulance traffic and elective procedures at UHS acute care hospitals were diverted to competitor facilities.

Click here to read the article.



March 4, 2021


Topic Area: Information Technology


Recent Posts

Must Know Recalls of 2025

For the safety of our readers, Healthcare Facilities Today has closely followed all recall notices related to the industry.


Sustainability as a Baseline in Healthcare Facilities

Hospitals can balance costs, build resilience and learn from global models for sustainable design to further their green goals.


Comanche County Memorial Hospital and Southwestern Medical Center Join to Form Partnership

The partnership will go into effect by the end of December 2025.


Choosing a Disinfectant That Kills Biofilm

Bacteria form biofilms in pipes from which cells can be released during sink use and spread outside the drains in droplets or as aerosols.


Third-Party Data Breach Case Underscores Need for Cyber Risk Management

Plaintiffs alleged negligence in safeguarding patient data; defendants denied wrongdoing but settled to avoid litigation costs.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.