Cybersecurity news for hospitals and health systems

The Black Cat/AlphV ransomware group has claimed to have leaked 5TB of patients' and employees' information from Morrison (Ill.) Community Hospital, SecurityAffairs reported Oct. 15.

Yale New Haven (Conn.) Health is requesting to pay a lower price for its planned 3-hospital acquisition from Los Angeles-based Prospect Medical Holdings as the hospitals deal with a six-week-long cyberattack, Yale News reported Oct. 13. 

An Illinois health system said it has terminated its relationship with its medical transcription service after that company experienced a data breach.

A 2020 ransomware attack at the Burlington-based University of Vermont Health Network compromised 1,300 servers and cost the health system $65 million, local news outlet WCAX reported Oct. 12.

Chicago-based Community First Medical Center reported a data breach that affected the information of 216,047 patients.

Three lawsuits have been filed against Grand Blanc, Mich.-based McLaren Health Care after a Russian ransomware gang allegedly stole the personal data of millions in a ransomware attack, GovInfoSecurity reported Oct. 10. 

Hospitals and health system boards have a responsibility to focus on cybersecurity as cyberattacks harm the entire enterprise, not just the IT department, the American Hospital Association reported.

John Fernandez, president and CEO of LifeSpan, based in Providence, R.I., said hospitals and health systems are getting attacked by cybersecurity events daily, WPRI reported Oct. 10. 

At hospitals and health systems, cyberattack costs and patient care disruptions were up in 2023, according to an Oct. 11 report.

Several health systems have faced financial repercussions due to data breaches and cyberattacks. Here is how much three health systems are paying to dispute them: