Skip to content Skip to navigation

Saint Francis Health System Acknowledges Breach, but Doesn’t Pay Ransom

September 22, 2016
by Rajiv Leventhal
| Reprints

Despite acknowledging that it had been the victim of a data breach involving ransomware earlier this month, the Tulsa, Okla.-based Saint Francis Health System decided not to act on the ransom demand, according to media reports.

According to a Tulsa World report, Saint Francis Health System was the victim of a data breach earlier this month in which approximately 6,000 names and addresses were compromised. “TheDarkOverlord,” who has previously hacked multiple hospitals and then attempted to extort them for money, claimed the attack on Saint Francis, but according to, whether that’s actually true or not remains unclear.

Officials at Saint Francis Health System were notified Sept. 7 that patient data was extracted from a server during an unauthorized external access. An anonymous demand for payment was made to the health provider in return for recovery of the information, according to a news release from Saint Francis. The Tulsa World report stated, “Officials decided not to act on the ransom demand after notifying law enforcement because payment would not guarantee or prevent data from being disclosed, the release states.” The issue of paying the ransom or not has been a hot one in the industry as ransomware breaches continue to plague hospitals and health systems.

Saint Francis said the data breach does not involve electronic health records (EHRs), social security numbers, driver's license information or financial information. The information breached is just related to names and addresses, reported the executive director of communications Lauren Landwerlin, per a report from KJRH-TV, an NBC-affiliated television station located in Tulsa.



OSU Wexner Medical Center Receives AHIMA Grace Award

The Ohio State University Wexner Medical Center (OSUWMC) received the American Health Information Management Association (AHIMA) annual Grace Award in recognition of its leadership in health information management.

Kansas Health Information Network Expands its Network across State Lines

The Kansas Health Information Network (KHIN) has announced that it is expanding its horizons, and is now connected to Health Information Exchange Texas (HIETexas).

CMS Selects Vendor to Modernize Critical Identity Infrastructure

The Centers for Medicare & Medicaid Services (CMS) last week announced it had selected San Francisco-based vendor Okta to enhance the security of its information systems.

Mayo Clinic, ASU Partner for Medical Education, Healthcare Innovation

The Mayo Clinic and Arizona State University have announced a partnership centered on transforming medical education and healthcare in the U.S. through a variety of innovation efforts.

CMS Hospital Compare Website Updated with VA Data

The Centers for Medicare & Medicaid Services (CMS) has announced the inclusion of Veterans Administration (VA) hospital performance data as part of the federal agency’s Hospital Compare website.

CMS Awards Funding to Special Innovation Projects

The Centers for Medicare & Medicaid Services (CMS) has awarded 20, two-year Special Innovation Projects (SIPs) aimed at local efforts to deliver better care at lower cost.