[et_pb_section bb_built=”1″ admin_label=”section” custom_padding_last_edited=”on|desktop” _builder_version=”3.0.65″ background_image=”https://www.mdsny.com/wp-content/uploads/2017/08/Buffalo-ECMC.jpg” background_blend=”darken” custom_padding_tablet=”50px|0|50px|0″ custom_css_before=”content:%22%22;||display: block;||height: 100%;||position: absolute;||top: 0;||left: 0;||width: 100%;||background-color: rgba(58, 60, 69, .36);” padding_mobile=”off” next_background_color=”#f7f7f4″][et_pb_row admin_label=”row” parallax_method_1=”off” parallax_method_2=”off” _builder_version=”3.0.65″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”1_3″][/et_pb_column][et_pb_column type=”2_3″][et_pb_divider height=”200″ disabled_on=”on|on|off” _builder_version=”3.0.47″]
[/et_pb_divider][et_pb_text _builder_version=”3.0.47″ text_font=”PT Sans||||” text_font_size=”72″ text_font_size_tablet=”52″ text_font_size_last_edited=”on|tablet” text_text_color=”#ffffff” text_line_height=”1.1em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” max_width=”620px” custom_margin=”0px||0px|”]
$10 Million Cyber Attack Hits New York Hospital
[/et_pb_text][/et_pb_column][/et_pb_row][/et_pb_section][et_pb_section bb_built=”1″ background_color=”#f7f7f4″ custom_padding_last_edited=”on|desktop” _builder_version=”3.0.65″ custom_padding=”54px|0px|30px|0px” custom_padding_tablet=”50px|0|50px|0″ prev_background_color=”#ffffff” next_background_color=”#2d3743″][et_pb_row admin_label=”row” custom_padding=”0px||0px|” column_padding_mobile=”on” parallax_method_1=”off” parallax_method_2=”off” _builder_version=”3.0.47″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”1_3″][et_pb_text _builder_version=”3.0.47″ text_font=”PT Sans||||” text_font_size=”10em” text_text_color=”#323232″ text_line_height=”1.1em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_margin=”0px||0px|”]
13
[/et_pb_text][et_pb_divider color=”#aeaeac” show_divider=”on” disabled_on=”off” _builder_version=”3.0.47″ custom_css_main_element=”width:20px;” hide_on_mobile=”off”]
[/et_pb_divider][et_pb_text _builder_version=”3.0.47″ text_font=”PT Sans|on|||” text_font_size=”18″ text_text_color=”#363636″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_margin=”-10px||0px|”]
Feburary, 2018
[/et_pb_text][/et_pb_column][et_pb_column type=”2_3″][et_pb_text _builder_version=”3.0.47″ text_font=”PT Serif||||” text_font_size=”24″ text_font_size_last_edited=”on|tablet” text_text_color=”#363636″ text_line_height=”1.4em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” max_width=”620px” custom_margin=”10px||0px|”]
Erie County Medical Center didn’t pay a nearly $30,000 ransom demand to the perpetrators of a massive cyber attack in April, but the intrusion that brought down the hospital’s computer systems will exact a very big cost.
ECMC officials estimate expenses tied to the incident were nearly $10 million.
[/et_pb_text][et_pb_text _builder_version=”3.0.47″ text_font=”PT Serif||||” text_font_size=”20″ text_font_size_last_edited=”on|tablet” text_text_color=”#363636″ text_line_height=”1.5em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” max_width=”620px” custom_margin=”30px||0px|”]
[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row custom_padding=”0px||0px|” custom_padding_tablet=”17px|||” column_padding_mobile=”on” parallax_method_1=”off” custom_padding_last_edited=”on|tablet” _builder_version=”3.0.47″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″][et_pb_image src=”https://www.mdsny.com/wp-content/uploads/2017/08/medical-image-2.jpg” show_bottom_space=”off” _builder_version=”3.0.65″ animation_style=”fade” animation_duration=”500ms” animation=”fade_in” sticky=”on” animation_intensity_slide=”10%” animation_direction=”center”]
[/et_pb_image][et_pb_text _builder_version=”3.0.65″ text_font=”PT Serif||on||” text_font_size=”16″ text_text_color=”#363636″ text_line_height=”1em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_margin=”20px||0px|”]
A ransomware attack took down over 6,000 computers at ECMC earlier this year.
[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row custom_padding=”0px|0px|27px|0px” _builder_version=”3.0.65″][et_pb_column type=”4_4″][et_pb_text _builder_version=”3.0.65″ text_font=”PT Serif||||” text_font_size=”20″ text_font_size_last_edited=”on|tablet” text_text_color=”#363636″ text_line_height=”1.5em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_margin=”30px||0px|”]
About half of that amount is for computer hardware, software and assistance needed in the response. The other half represents a combination of increased expenses, such as for staff overtime pay, and lower revenues from the loss of business during the system down time.
That’s just the costs related to the incident. Going forward, medical center officials also anticipate an ongoing additional expense of $250,000 to $400,000 a month for investments in upgraded technology and employee education to harden its computer system defenses to reduce the risk and impact of future attacks.
[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row custom_padding=”50px|||” padding_mobile=”on” column_padding_mobile=”on” parallax_method_1=”off” _builder_version=”3.0.47″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″][et_pb_divider color=”#aeaeac” show_divider=”on” disabled_on=”off” _builder_version=”3.0.47″ hide_on_mobile=”off”]
[/et_pb_divider][et_pb_text _builder_version=”3.0.47″ text_font=”PT Serif||||” text_font_size=”48″ text_font_size_tablet=”38″ text_font_size_last_edited=”on|tablet” text_text_color=”#363636″ text_line_height=”1.3em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” text_orientation=”center” max_width=”900px” module_alignment=”center” custom_margin=”16px||30px|”]
“What happened to us was a wake-up call for the entire community,” said Thomas Quatroche Jr., the medical center’s chief executive officer. “Any major institution that wants to improve cybersecurity will have to make investments just like this.”
[/et_pb_text][et_pb_divider color=”#aeaeac” show_divider=”on” disabled_on=”off” _builder_version=”3.0.47″ hide_on_mobile=”off”]
[/et_pb_divider][/et_pb_column][/et_pb_row][et_pb_row admin_label=”row” custom_padding=”17px|||” padding_mobile=”on” column_padding_mobile=”on” parallax_method_1=”off” parallax_method_2=”off” _builder_version=”3.0.47″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”1_3″][et_pb_image src=”https://www.mdsny.com/wp-content/uploads/2017/08/PAY.jpg” _builder_version=”3.0.65″ custom_margin=”|||” animation_style=”slide” animation_direction=”left” animation_duration=”500ms” animation_intensity_slide=”10%” show_bottom_space=”on”]
[/et_pb_image][/et_pb_column][et_pb_column type=”2_3″][et_pb_text _builder_version=”3.0.47″ text_font=”PT Serif||||” text_font_size=”20″ text_font_size_last_edited=”on|tablet” text_text_color=”#363636″ text_line_height=”1.5em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” max_width=”620px” custom_margin=”30px||0px|”]
The attack took down more than 6,000 computers and forced the medical center back to the days of paper charts and face-to-face messaging. A ransom demand appeared on hospital computer screens that sought 24 bitcoins, a digital currency that was valued at about $1,215 per bitcoin at that time, totaling nearly $30,000 to unlock the medical center’s system.
[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row _builder_version=”3.0.65″][et_pb_column type=”4_4″][et_pb_text _builder_version=”3.0.65″ text_font=”PT Serif||||” text_font_size=”20″ text_font_size_last_edited=”on|tablet” text_text_color=”#363636″ text_line_height=”1.5em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_margin=”30px||0px|”]
ECMC didn’t pay the ransom, a decision recommended by security experts and law enforcement authorities. Among the reasons: Even if the attackers provided a key to unlock the computers, there was no guarantee it would work and no guarantee the computer systems would truly be wiped clean of malicious software. It also didn’t seem like the right thing to do, officials said at the time.
Fortunately — and unlike many big urban public hospitals — ECMC finds itself in a reasonably good position to handle the problem.
Perhaps most importantly, the Grider Street medical center increased its insurance coverage against such events last November from $2 million to $10 million, Quatroche said. He said he is confident the hospital can recover the ransomware-related costs in its insurance claim, and publicly thanked ECMC’s general counsel, internal auditors, and insurance broker for recommending the increased coverage.
ECMC, which includes a 602-bed hospital and 390-bed nursing home, is also doing well from a business standpoint. It closed 2016, the busiest year in the hospital’s history, with a $2.1 million operating surplus on $593 million in operating revenues.
Quatroche said so far in 2017 the medical center is $1.6 million ahead through June, and that’s after a downturn in patient volumes in the spring as the hospital spent weeks rebuilding its information systems following the April 9 ransomware demand and discovery of the attack. He expressed confidence that ECMC would end 2017 with a surplus of $1 million to $2 million.
“We will have increased expenses around IT,” said Quatroche. “Those costs will be a trade-off as we look at other equipment at the hospital. We feel we can we find savings in non-patient areas.”
[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row admin_label=”row” custom_padding=”17px||0px|” column_padding_mobile=”on” parallax_method_1=”off” parallax_method_2=”off” _builder_version=”3.0.47″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”1_3″][et_pb_image src=”http://www.mdsny.com/wp-content/uploads/2017/05/bitcoinquare.jpg” show_in_lightbox=”on” always_center_on_mobile=”off” _builder_version=”3.0.65″ custom_margin=”36px||0px|” animation_style=”slide” animation_direction=”left” animation_duration=”500ms” animation_intensity_slide=”10%” show_bottom_space=”on”]
[/et_pb_image][/et_pb_column][et_pb_column type=”2_3″][et_pb_text _builder_version=”3.0.47″ text_font=”PT Serif||||” text_font_size=”20″ text_font_size_last_edited=”on|tablet” text_text_color=”#363636″ text_line_height=”1.5em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” max_width=”620px” custom_margin=”30px||0px|”]
A global problem
Officials believe a hacker or hackers used an automatic program that anti-virus software could not recognize to exploit a hospital web server accessible remotely that should have been configured differently to prevent an incursion. The hackers then applied “brute force” computing — trying millions of character combinations to identify a relatively easy default password to gain entrance into the hospital’s system. Once they had breached the perimeter, it’s believed the intruders then logged in and encrypted files in a way that made it more difficult to recover data.
[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row _builder_version=”3.0.65″][et_pb_column type=”4_4″][et_pb_video_slider _builder_version=”3.0.65″][et_pb_video_slider_item src=”https://www.youtube.com/watch?v=TDVuqjYOATQ” _builder_version=”3.0.65″ show_image_overlay=”off”][/et_pb_video_slider_item][et_pb_video_slider_item src=”https://www.youtube.com/watch?v=zlB0rQSht0Q” _builder_version=”3.0.65″ show_image_overlay=”off”][/et_pb_video_slider_item][/et_pb_video_slider][/et_pb_column][/et_pb_row][et_pb_row custom_padding=”0px|0px|27px|0px” _builder_version=”3.0.65″][et_pb_column type=”4_4″][et_pb_text _builder_version=”3.0.65″ text_font=”PT Serif||||” text_font_size=”20″ text_font_size_last_edited=”on|tablet” text_text_color=”#363636″ text_line_height=”1.5em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_margin=”30px||0px|”]
What happened at ECMC reflects a global crisis, with thousands of attacks — large and small — now occurring each year at many businesses, organizations and government agencies.
Kaleida Health, for instance, recently experienced a phishing incident that led it to notify 2,800 patients about an attempt to gain personal information. Phishing is the use of a fraudulent email purporting to be from a reputable company or organization that tries to get people to reveal private data.
The Kaleida hospital system reported that it learned on May 24 that an unauthorized party potentially accessed an employee’s email account and, as a result, may have gained access to other Kaleida Health email accounts that may have included patients’ names, medical record numbers, dates of birth, diagnoses, treatment information, or other clinical information. Social Security numbers and financial information were not contained in the email accounts, said spokesman Michael Hughes.
He said it’s impossible to tell if the perpetrator did view any emails with patient information, but the hospital system is taking the precaution of notifying patients. Under federal law, hospitals are required to report potential medical data breaches involving more than 500 people.
[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row _builder_version=”3.0.67″][et_pb_column type=”4_4″][et_pb_cta title=”Get A Free Security Report Card of Your Business” button_url=”https://www.mdsny.com/security-report-card/” button_text=”View My Company’s Security Report Card” background_color=”rgba(0,12,9,0.72)” _builder_version=”3.0.101″ header_font_size_phone=”22px” header_font_size_last_edited=”on|desktop” header_text_color=”rgba(255,255,255,0.97)” custom_button=”on” button_icon=”%%273%%” button_bg_color_hover=”rgba(255,255,255,0)” button_border_color_hover=”#ffffff” button_text_size_phone=”13px” button_text_size_last_edited=”on|desktop” custom_css_main_element=”border-radius: 25px;”]
[/et_pb_cta][/et_pb_column][/et_pb_row][et_pb_row custom_padding=”1px|0px|27px|0px” _builder_version=”3.0.65″][et_pb_column type=”4_4″][et_pb_text _builder_version=”3.0.65″ text_font=”PT Serif||||” text_font_size=”20″ text_font_size_last_edited=”on|tablet” text_text_color=”#363636″ text_line_height=”1.5em” background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_margin=”30px||0px|”]
Task force recommendations
The extent of cybercrime is huge, global and growing, although difficult to pin down with certainty. In the U.S., financial losses from incidents in 2016 exceeded $1.3 billion in 2016, according to a Federal Bureau of Investigation’s Internet Crime Report released in June. The FBI’s Internet Complaint Center received 298,728 complaints last year, but the agency estimated that only 15 percent of the nation’s internet fraud victims report crimes to law enforcement.
In the case of ransomware, that may mean many victims are paying the ransoms. An internet security threat report released in April by Symantec, the giant cybersecurity company, found that 64 percent of American ransomware victims are willing to pay a ransom, compared to 34 percent internationally. Willingness to pay ransoms is likely a major reason for a dramatic increase from 2015 to 2016 in ransom demands, even though paying the ransom doesn’t guarantee decryption of files, according to Symantec.
The company report cited a finding by Norton Cyber Security that only 47 percent of victims who paid a ransom reported getting their files back.
Symantec also reported that the use of email as an infection point has become a weapon of choice for cybercriminals. Its review found that 1 in 131 emails contained a malicious link or attachment – the highest rate in five years. The review noted that business email phishing scams — in which criminals impersonate a company official in an attempt to get an employee, customer or vendor to transfer funds or sensitive information to the phisher — scammed more than $3 billion from businesses over the last three years.
Health care is one of the most frequently targeted industries by cybercriminals, and that’s partly a result of its many interconnected computer systems, patient records and medical devices.
A report by the Health Care Industry Cybersecurity Taskforce released in June found that health care lags behind other industries in cybersecurity because of inadequate in-house expertise, poorly secured or outdated systems, and a lack of awareness of the seriousness and complexity of the threat, especially to patient privacy and safety.
“Health care cybersecurity is a key public health concern that needs immediate and aggressive attention,” according to the task force, which was created by Congress.
Among its many recommendations: define and streamline leadership, governance and expectations for healthcare industry cybersecurity; increase the security and resilience of medical devices and health information technology; develop the health care workforce capacity necessary to prioritize and ensure cybersecurity awareness and technical capabilities; and improve information sharing of industry threats, risks, and mitigations.
Education is part of the solution
A big piece of the challenge is educating people not to be tricked by fraudulent email and reacting quickly if a cyber attack breaks through computer defenses.
Quatroche again praised the resourcefulness of the medical center staff in its response to the attack.
“In our case, everyone — the ER, the labs, radiology — did what they were supposed to do,” he said.
But one key lesson learned that Quatroche is sharing with other health care officials is a recommendation to train employees in regular exercises as close to real life, worst-case scenarios as possible.
“Hospitals should really be drilling with everything down,” he said.
An earlier version of this article appears in https://buffalonews.com
Written by:
[/et_pb_text][et_pb_cta title=”Is your organization safe? How To Ransomware-Proof Your Organizaion.” button_url=”http://mdsny.com/decryption-tools/” button_text=”Access Ransomware Decryption and Prevention Tools” background_color=”rgba(0,12,9,0.72)” _builder_version=”3.0.101″ header_font_size_phone=”22px” header_font_size_last_edited=”on|desktop” header_text_color=”rgba(255,255,255,0.97)” custom_button=”on” button_icon=”%%273%%” button_bg_color_hover=”rgba(255,255,255,0)” button_border_color_hover=”#ffffff” button_text_size_phone=”13px” button_text_size_last_edited=”on|desktop” custom_css_main_element=”border-radius: 25px;”]
[/et_pb_cta][/et_pb_column][/et_pb_row][/et_pb_section][et_pb_section bb_built=”1″ background_color=”#2d3743″ _builder_version=”3.0.90″ custom_margin=”|||” custom_padding=”17px|0px|0px|0px” prev_background_color=”#f7f7f4″ global_module=”123120″][et_pb_row global_parent=”123120″ make_fullwidth=”on” custom_padding=”0px|0px|12px|0px” _builder_version=”3.0.90″ module_alignment=”center”][et_pb_column type=”1_2″][et_pb_text global_parent=”123120″ background_layout=”dark” _builder_version=”3.0.90″ text_font=”||||||||” text_font_size=”12px” text_line_height=”1.6em” header_font=”||||||||” header_2_font=”||||||||”]
About MDS:
Updating your IT Infrastructure doesn’t have to be a do-it-yourself project.
With MDS, you can focus on growing your business while we take care of the technology. Our engineers go beyond standard canned offerings by creating end-to-end project solutions tailored to fit your organization’s specific needs.
MDS experts are available 24/7 and have a wide range of skills that allow you to harness the power of a large IT team, without the overhead.
[/et_pb_text][/et_pb_column][et_pb_column type=”1_4″][et_pb_text global_parent=”123120″ background_layout=”dark” _builder_version=”3.0.95″ text_font=”||||||||” text_line_height=”1.4em”]
Upcoming Events:
Feb 22: GDPR – There is Still Time To Apply! Gap Analysis Workshop
March 20: Be Brilliant in 2018 – Experience O365 Like Never Before!
[/et_pb_text][/et_pb_column][et_pb_column type=”1_4″][et_pb_text global_parent=”123120″ background_layout=”dark” _builder_version=”3.0.90″ text_font=”||||||||” text_line_height=”1.4em”]
Contact Us:
NYC Headquarters:
307 W. 38th Street, Suite 1801
New York, NY 10018
Tel: 646-744-1000
Email: Contactus@mdsny.com
NYC | Miami | Houston | PR
[/et_pb_text][/et_pb_column][/et_pb_row][/et_pb_section]