Skip to content Skip to navigation

Appalachian Regional Healthcare Hit with Cyber Attack, Systems Down for a Week

September 2, 2016
by Heather Landi
| Reprints
Click To View Gallery

Appalachian Regional Healthcare (ARH), a health system with hospitals in eastern Kentucky and southern West Virginia, is still in the process of trying to restore its systems following a cyber attack that was discovered Saturday, Aug. 27.

Last Saturday, ARH Spokesperson Melissa Cornett released a statement saying the health system was dealing with technical complications.

The ARH system of hospitals in Kentucky and West Virginia are operating under their Emergency Operations Plan due to a computer virus "that has limited our use of electronic web-based services and electronic communications," Cornett said in her statement on Aug. 27.

ARH operates 11 hospitals, two in West Virginia and nine in Kentucky.

On Tuesday, Cornett released a statement saying officials do not believe at this time private patient information has been compromised. “ARH continues to work with authorities and computer experts to address the problems and restore our systems to operational capacity as quickly as possible,” she stated.

“In the meantime, ARH would like to emphasize that we presently have no reason to believe that the protected health information or any financial information of our patients or employees has been accessed. Please be assured that ARH will investigate this fully, and will take prompt action to notify and protect patients and employees if it appears that their private information has been accessed.”

Since Saturday, ARH employees had been tracking patients and performing their jobs without access to any of the hospitals’ computerized systems, Cornett said Tuesday afternoon.

Cornett further stated, “ARH’s hospitals and other locations of care across eastern Kentucky and southern West Virginia remain open, and our staff is working hard to continue to provide the same level of quality healthcare to our patients while we recover from this cyber attack. We appreciate the extra efforts of our outstanding workforce, and the patience of the people we serve, as we work through the inconvenience of having computer systems out of service.”

Cornett said all ARH computers were shut down to prevent further spread of the virus and all paperwork is being managed manually. She said staff will assess all critical patients to determine if they should be transferred to another facility for care. Officials ask patients visiting a physician practice to bring all prescribed medications to upcoming appointments until further notice.

Local news station WYMT, a CBS affiliate, reported on Tuesday that federal authorities are investing the cyber attack at ARH. "A law enforcement source told CBS News that they are aware of a cyber breach at ARH. CBS News reports the incident appears to be ongoing. When asked whether it was a ransomware case, a situation in which hackers demand money, an FBI spokesman would not comment except to say ‘they cannot confirm or deny the existence or non-existence of an investigation,’” the WYMT report stated.

A number of hospitals have been hit with ransomware attacks in the past year, and the situation at ARH, with a computer virus requiring the shut-down of most of the computer systems, bears some similarity to those attacks. In February, Los Angeles-based Hollywood Presbyterian had to operate without its computer systems and without access to electronic health records for more than a week. The computer systems were only restored after the hospital paid hackers $17,000. In late March, the MedStar Health system, based in Columbia, Md., and serving the Washington-Baltimore corridor, also was hit with a ransomware attack and systems were down more than a week. MedStar Health officials denied that any ransom was paid related to the cyber attack on its computer networks.

Get the latest information on Cybersecurity and attend other valuable sessions at this two-day Summit providing healthcare leaders with educational content, insightful debate and dialogue on the future of healthcare and technology.

Learn More

Topics

News

Trump Administration Appoints Peter Severino to Head Office for Civil Rights

Roger Severino, a former staffer at The Heritage Foundation, has been appointed as the director of the Office of Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS).

ACP: EHRs Have Great Benefits, but Raise Ethical Questions, Too

Electronic health records (EHRs) should facilitate high value patient-centered care, strong patient-physician relationships, and effective training of future physicians, but they also raise ethical questions, the ACP wrote.

Allegheny Health Network, VA Pittsburgh Integrate EMR Systems

Allegheny Health Network (AHN), based in Pittsburgh, and VA Pittsburgh Healthcare System (VAPHS), have announced the successful integration of their electronic medical record (EMR) platforms.

Wisconsin Urology Group Notifies Patients of Data Breach Due to Ransomware Attack

Wauwatosa, Wis.-based Metropolitan Urology Group has notified its patients of a breach of unsecured patient health information due to a ransomware attack back in November 2016.

Study: For Post-Op Patients, Mobile Apps for Follow-Up Care Led to Fewer In-Person Visits

For patients undergoing ambulatory surgery, those who used a mobile app for follow-up care attended fewer in-person visits post- operation than patients who did not use the app, according to a study in JAMA Surgery.

Information Blocking is Routine and Fairly Widespread, Survey of HIEs Finds

In a survey, 50 percent of HIE leaders said electronic health record (EHR) vendors "routinely" engage in information blocking, and 25 percent reported that hospitals and health systems routinely engage in business practices that interfere with electronic health information exchange.