Skip to content Skip to navigation

Saint Francis Health System Acknowledges Breach, but Doesn’t Pay Ransom

September 22, 2016
by Rajiv Leventhal
| Reprints

Despite acknowledging that it had been the victim of a data breach involving ransomware earlier this month, the Tulsa, Okla.-based Saint Francis Health System decided not to act on the ransom demand, according to media reports.

According to a Tulsa World report, Saint Francis Health System was the victim of a data breach earlier this month in which approximately 6,000 names and addresses were compromised. “TheDarkOverlord,” who has previously hacked multiple hospitals and then attempted to extort them for money, claimed the attack on Saint Francis, but according to DataBreaches.net, whether that’s actually true or not remains unclear.

Officials at Saint Francis Health System were notified Sept. 7 that patient data was extracted from a server during an unauthorized external access. An anonymous demand for payment was made to the health provider in return for recovery of the information, according to a news release from Saint Francis. The Tulsa World report stated, “Officials decided not to act on the ransom demand after notifying law enforcement because payment would not guarantee or prevent data from being disclosed, the release states.” The issue of paying the ransom or not has been a hot one in the industry as ransomware breaches continue to plague hospitals and health systems.

Saint Francis said the data breach does not involve electronic health records (EHRs), social security numbers, driver's license information or financial information. The information breached is just related to names and addresses, reported the executive director of communications Lauren Landwerlin, per a report from KJRH-TV, an NBC-affiliated television station located in Tulsa.

Get the latest information on Cybersecurity and attend other valuable sessions at this two-day Summit providing healthcare leaders with educational content, insightful debate and dialogue on the future of healthcare and technology.

Learn More

Topics

News

Healthcare Data Breaches: A Year in Review

The latest year-in-review Breach Barometer report from Protenus paints a stark picture—2016 average at least one health data breach per day, affecting more than 27 million patient records.

Healthcare Industry Could Save $9.4B with Full Adoption of Electronic Transactions

The healthcare industry continues to make modest progress toward full adoption of electronic business transactions, but significant gaps remain, representing an opportunity for $9.4 billion in savings, according to new data from the 2016 CAQH Index.

ONC Announces Phase 2 Winners of Consumer, Provider App Challenges

ONC today announced the Phase 2 winners for the Consumer Health Data Aggregator Challenge and the Provider User Experience Challenge.

Health Affairs: ACOs with High Numbers of Minority Patients Struggle in Quality

Accountable care organizations (ACOs) that have a high proportion of minority patients were associated with low scores on about three-fourths of Medicare quality performance measures, according to new research published in Health Affairs.

Trump Taps David Shulkin, an Obama Appointee, for VA Secretary

President-elect Donald Trump announced yesterday that David Shulkin, M.D.—an Obama administration appointee and current VA undersecretary—will lead the Department of Veterans Affairs.

NIST Publishes Draft Update to Cybersecurity Framework

The National Institute of Standards and Technology (NIST) has published proposed updates to the Framework for Improving Critical Infrastructure Cybersecurity—also known as the Cybersecurity Framework.