Appalachian Regional Healthcare Hit with Cyber Attack, Systems Down for a Week | Healthcare Informatics Magazine | Health IT | Information Technology Skip to content Skip to navigation

Appalachian Regional Healthcare Hit with Cyber Attack, Systems Down for a Week

September 2, 2016
by Heather Landi
| Reprints
Click To View Gallery

Appalachian Regional Healthcare (ARH), a health system with hospitals in eastern Kentucky and southern West Virginia, is still in the process of trying to restore its systems following a cyber attack that was discovered Saturday, Aug. 27.

Last Saturday, ARH Spokesperson Melissa Cornett released a statement saying the health system was dealing with technical complications.

The ARH system of hospitals in Kentucky and West Virginia are operating under their Emergency Operations Plan due to a computer virus "that has limited our use of electronic web-based services and electronic communications," Cornett said in her statement on Aug. 27.

ARH operates 11 hospitals, two in West Virginia and nine in Kentucky.

On Tuesday, Cornett released a statement saying officials do not believe at this time private patient information has been compromised. “ARH continues to work with authorities and computer experts to address the problems and restore our systems to operational capacity as quickly as possible,” she stated.

“In the meantime, ARH would like to emphasize that we presently have no reason to believe that the protected health information or any financial information of our patients or employees has been accessed. Please be assured that ARH will investigate this fully, and will take prompt action to notify and protect patients and employees if it appears that their private information has been accessed.”

Since Saturday, ARH employees had been tracking patients and performing their jobs without access to any of the hospitals’ computerized systems, Cornett said Tuesday afternoon.

Cornett further stated, “ARH’s hospitals and other locations of care across eastern Kentucky and southern West Virginia remain open, and our staff is working hard to continue to provide the same level of quality healthcare to our patients while we recover from this cyber attack. We appreciate the extra efforts of our outstanding workforce, and the patience of the people we serve, as we work through the inconvenience of having computer systems out of service.”

Cornett said all ARH computers were shut down to prevent further spread of the virus and all paperwork is being managed manually. She said staff will assess all critical patients to determine if they should be transferred to another facility for care. Officials ask patients visiting a physician practice to bring all prescribed medications to upcoming appointments until further notice.

Local news station WYMT, a CBS affiliate, reported on Tuesday that federal authorities are investing the cyber attack at ARH. "A law enforcement source told CBS News that they are aware of a cyber breach at ARH. CBS News reports the incident appears to be ongoing. When asked whether it was a ransomware case, a situation in which hackers demand money, an FBI spokesman would not comment except to say ‘they cannot confirm or deny the existence or non-existence of an investigation,’” the WYMT report stated.

A number of hospitals have been hit with ransomware attacks in the past year, and the situation at ARH, with a computer virus requiring the shut-down of most of the computer systems, bears some similarity to those attacks. In February, Los Angeles-based Hollywood Presbyterian had to operate without its computer systems and without access to electronic health records for more than a week. The computer systems were only restored after the hospital paid hackers $17,000. In late March, the MedStar Health system, based in Columbia, Md., and serving the Washington-Baltimore corridor, also was hit with a ransomware attack and systems were down more than a week. MedStar Health officials denied that any ransom was paid related to the cyber attack on its computer networks.

Get the latest information on Health IT and attend other valuable sessions at this two-day Summit providing healthcare leaders with educational content, insightful debate and dialogue on the future of healthcare and technology.

Learn More

Topics

News

Study will Leverage Connecticut HIE to Help Prevent Suicides

A new study will aim to leverage CTHealthLink, a physician-led health information exchange (HIE) in Connecticut, to help identify the factors leading to suicide and to ultimately help prevent those deaths.

Duke Health First to Achieve HIMSS Stage 7 Rating in Analytics

North Carolina-based Duke Health has become the first U.S. healthcare institution to be awarded the highest honor for analytic capabilities by HIMSS Analytics.

NIH Releases First Dataset from Adolescent Brain Development Study

The National Institutes of Health (NIH) announced the release of the first dataset from the Adolescent Brain Cognitive Development (ABCD) study, which will enable scientists to conduct research on the many factors that influence brain, cognitive, social, and emotional development.

Boston Children's Accelerates Data-Driven Approach to Clinical Research

In an effort to bring a more data-driven approach to clinical research, Boston Children’s Hospital has joined the TriNetX global health research network.

Paper Records, Films Most Common Type of Healthcare Data Breach, Study Finds

Despite the high level of hospital adoption of electronic health records and federal incentives to do so, paper and films were the most frequent location of breached data in hospitals, according to a recent study.

AHA Appoints Senior Advisor for Cybersecurity and Risk

The American Hospital Association (AHA) has announced that John Riggi has joined the association as senior advisor for cybersecurity and risk.