The report, released Aug. 21, noted Savoy Medical Center sent $226,330 to an unknown party pretending to be one of their vendors last August. The vendor’s business email had been compromised, and the hacker fraudulently modified payment instructions.
The vendor identified the breech when it did not receive Savoy’s payment. Savoy reported the issue to their bank and attempted to recover funds, according to the report. Since the hospital didn’t have procedures in place to validate wire instructions received through email, the incident wasn’t covered by insurance.
However, $81,819 of the funds were recovered by Sept. 29, 2023.
Savoy’s leadership team revised procedures for confirming modified vendor information and requests after the incident.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.