Skip to content Skip to navigation

Saint Francis Health System Acknowledges Breach, but Doesn’t Pay Ransom

September 22, 2016
by Rajiv Leventhal
| Reprints

Despite acknowledging that it had been the victim of a data breach involving ransomware earlier this month, the Tulsa, Okla.-based Saint Francis Health System decided not to act on the ransom demand, according to media reports.

According to a Tulsa World report, Saint Francis Health System was the victim of a data breach earlier this month in which approximately 6,000 names and addresses were compromised. “TheDarkOverlord,” who has previously hacked multiple hospitals and then attempted to extort them for money, claimed the attack on Saint Francis, but according to DataBreaches.net, whether that’s actually true or not remains unclear.

Officials at Saint Francis Health System were notified Sept. 7 that patient data was extracted from a server during an unauthorized external access. An anonymous demand for payment was made to the health provider in return for recovery of the information, according to a news release from Saint Francis. The Tulsa World report stated, “Officials decided not to act on the ransom demand after notifying law enforcement because payment would not guarantee or prevent data from being disclosed, the release states.” The issue of paying the ransom or not has been a hot one in the industry as ransomware breaches continue to plague hospitals and health systems.

Saint Francis said the data breach does not involve electronic health records (EHRs), social security numbers, driver's license information or financial information. The information breached is just related to names and addresses, reported the executive director of communications Lauren Landwerlin, per a report from KJRH-TV, an NBC-affiliated television station located in Tulsa.

Get the latest information on Cybersecurity and attend other valuable sessions at this two-day Summit providing healthcare leaders with educational content, insightful debate and dialogue on the future of healthcare and technology.

Learn More

Topics

News

University of Maryland Medical System Earns HIMSS Stage 6 Recognition

The University of Maryland Medical System (UMMS), based in Baltimore, has achieved Stage 6 on HIMSS Analytics’ Electronic Medical Record Adoption Model (EMRAM) for the ambulatory environment.

Intermountain Wins Hearst Health Prize for Mental Health Integration

based Intermountain Healthcare was named the winner of the 2017 Hearst Health Prize for its mental health integration program, which embeds mental health screening and treatment within primary care and select specialty practices.

Califf to Lead Patient-Centered Research Foundation

Robert Califf, M.D., who stepped down as commissioner of the U.S. Food and Drug Administration in January, has been named chair of a new nonprofit organization, the People-Centered Research Foundation.

U.S. Lags on Adoption of Telehealth, According to Survey of Physicians

Only 4 percent of U.S.-based physicians think that their state has done “very well” implementing telehealth technologies and only 15 percent responded “well” when evaluating their state’s efforts to implement telehealth, according to a survey by Sermo.

CDC Survey: Cardiologists, Neurologists Have Highest EHR Adoption Rates

According to the Center for Disease Control and Prevention’s (CDC) National Electronic Health Records Survey, office-based cardiologists and neurologists have the highest electronic health record (EHR) adoption rates by specialty, at 95.6 percent and 94.5 percent, respectively.

UPMC Rolls out Telemedicine App for Pennsylvania Patients with 24/7 Service

UPMC (University of Pittsburgh Medical Center) Health Plan recently launched a new smartphone-enabled UPMC AnywhereCare platform that allows patients to receive remote care from emergency room professionals 24 hours a day and with reduced copays.