Saint Francis Health System Acknowledges Breach, but Doesn’t Pay Ransom

Sept. 22, 2016
Despite acknowledging that it had been the victim of a data breach involving ransomware earlier this month, the Tulsa, Okla.-based Saint Francis Health System decided not to act on the ransom demand, according to media reports.

Despite acknowledging that it had been the victim of a data breach involving ransomware earlier this month, the Tulsa, Okla.-based Saint Francis Health System decided not to act on the ransom demand, according to media reports.

According to a Tulsa World report, Saint Francis Health System was the victim of a data breach earlier this month in which approximately 6,000 names and addresses were compromised. “TheDarkOverlord,” who has previously hacked multiple hospitals and then attempted to extort them for money, claimed the attack on Saint Francis, but according to DataBreaches.net, whether that’s actually true or not remains unclear.

Officials at Saint Francis Health System were notified Sept. 7 that patient data was extracted from a server during an unauthorized external access. An anonymous demand for payment was made to the health provider in return for recovery of the information, according to a news release from Saint Francis. The Tulsa World report stated, “Officials decided not to act on the ransom demand after notifying law enforcement because payment would not guarantee or prevent data from being disclosed, the release states.” The issue of paying the ransom or not has been a hot one in the industry as ransomware breaches continue to plague hospitals and health systems.

Saint Francis said the data breach does not involve electronic health records (EHRs), social security numbers, driver's license information or financial information. The information breached is just related to names and addresses, reported the executive director of communications Lauren Landwerlin, per a report from KJRH-TV, an NBC-affiliated television station located in Tulsa.

Sponsored Recommendations

A Comprehensive Workplace Safety Checklist

This checklist is designed for healthcare facilities focused on increasing workplace safety. It’s meant to inspire ideas, strengthen safety plans, and encourage joint commission...

Healthcare Rankings Report

Adapting in Healthcare: Key Insights and Strategies from Leading Systems As healthcare marketers navigate changes in a volatile industry, they know one thing is certain: we've...

Healthcare Reputation Industry Trends

Navigating the Tipping Point: Strategies for Reputation Management in a Volatile Healthcare Environment As healthcare marketers navigate changes in a volatile industry, they can...

Clinical Evaluation: An AI Assistant for Primary Care

The AAFP's clinical evaluation offers a detailed analysis of how an innovative AI solution can help relieve physicians' administrative burden and aid them in improving health ...