incident · 1715126400000
Ascension Healthcare Ransomware Attack
Ascension, a major U.S. healthcare system, suffered a ransomware attack that disrupted operations across multiple states, forcing hospitals to divert emergency services and delay patient care.
What happened
On May 8, 2024, Ascension detected unusual activity on its network. The incident, later confirmed as a ransomware attack, forced the organization to take systems offline, including its MyChart electronic health record system, leading to widespread operational disruptions.
Technical mechanism
While specific technical details were not fully disclosed initially, the attack involved the deployment of ransomware that encrypted critical systems, rendering them inaccessible and forcing a transition to manual, paper-based processes.
Why it matters
The attack on Ascension further highlighted the vulnerability of the U.S. healthcare sector to ransomware, demonstrating how cyber incidents can directly impact patient safety and care delivery by disabling critical systems like electronic health records.
Impact
Hospitals across multiple states were forced to divert emergency services, postpone elective surgeries, and rely on manual documentation. Patient care was significantly delayed, and access to medical records was severed.
Response
Ascension took systems offline to contain the spread, engaged Mandiant for investigation, and notified law enforcement. They initiated recovery efforts to restore electronic health records and other critical systems safely.
Defensive lessons
- Maintain and regularly test robust offline backups for critical systems.
- Develop comprehensive business continuity plans that include procedures for operating without electronic health records.
- Enhance network segmentation to limit the lateral movement of ransomware.
Evidence register
- Ascension — Cybersecurity Event Update (verified)