On January 27, Frederick Health detected a ransomware attack on its IT systems, according to a press release. The facility immediately took systems offline to contain the threat and engaged third-party cybersecurity experts to assist in safely restoring operations. Law enforcement was notified, and an investigation is still determining if personal data was compromised.
Ransomware attacks are serious threats to a healthcare facility’s overall security as they store tons of sensitive data such as patient medical records. A ransomware attack can result in a data breach, potentially compromising countless records. According to a report from The HIPAA Journal, the volume of exposed records surged in 2024, reaching 275 million – a 63.5 percent increase from 2023.
Despite the attack, all Frederick Health facilities remain open, except for the Frederick Health Village Lab. The emergency department continues to accept walk-ins and EMS transport. While backup procedures are in place, some service delays are occurring.
Related: Healthcare is a Major Ransomware Target
However, not all healthcare facilities share the same fate. Palomar Health Medical Group suffered from a cyberattack in May 2024 that took out its systems, rendering them inaccessible. It took the company two months to restore some of their systems, leaving hundreds of hours' worth of downtime. According to Statista, the average number of days spent in downtime in 2023 caused by attacks was about 18.71 days.
To avoid data breaches and downtime caused by cyberattacks, healthcare facility managers can follow this checklist for cyber hygiene from Kaspersky:
- Keep passwords safe and secure
- Use multi-factor authentication
- Back up data routinely
- Ensure privacy
- Keep apps, software and firmware updated
- Secure routers
- Avoid social engineering attacks
- Use network firewalls
- Encrypt devices
- Wipe hard drives before disposing of them
- Ensure high-quality antivirus protection
Jeff Wardon, Jr., is the assistant editor for the facilities market.