The FBI is investigating a possible ransomware attack against Columbia, Maryland-based MedStar Health. MedStar’s electronic health records system and e-mail remained down Monday evening, according to the Washington Post.
If the breach does turn out to be ransomware, it would be the largest such attack on a U.S. healthcare network. MedStar has 10 hospitals and more 
than 250 outpatient centers in the Washington and Baltimore metro areas.
A virus hit the massive network Monday morning and the health system reverted to paper record-keeping after the Cerner EHR was taken down. Around 10:30 a.m. EDT, two MedStar hospitals in Baltimore asked Maryland officials to stop sending ambulances, the Associated Press reported.
“MedStar acted quickly with a decision to take down all system interfaces to prevent the virus from spreading throughout the organization,” spokeswoman Ann Nickels said, according to the Post. She said that “all of our clinical facilities remain open and functioning.”
The Baltimore facilities, Good Samaritan Hospital and Union Memorial Hospital, reportedly lifted the diversion orders after MedStar turned on backup systems. But it’s doubtful MedStar is back to full capacity.
“Even the lowest-level staff can’t communicate with anyone. You can’t schedule patients, you can’t access records, you can’t do anything,” an anonymous MedStar employee told the Post.
This employee said she had been told by two co-workers that ransom messages popped up on their computer screens, but the woman had not seen the messages herself, the Post reported.
Nickels was unable to confirm whether it was a ransom attack, the story said.
The medical director for the state of Maryland’s Institute of Emergency Medical Services Systems told the Associated Press that he suspects ransomware. Dr. Richard Alcorta is quoted as saying that
“People view this, I think, as a form of terrorism and are attempting to extort money by attempting to infect them with this type of virus,” Dr. Richard Alcorta said.
Read More – Source: Hackers target MedStar in possible ransomware attackMedCity News
By NEIL VERSEL
Photo: Flickr user Asim Bharwani