A recent ransomware attack has resulted in a healthcare chain, which operates 30 hospitals across six states, having to redirect patients from some of its emergency rooms to other medical facilities. The attack, which occurred on November 23, prompted Ardent Health Services to take its network offline and suspend user access to its information technology applications, including the software used to document patient care.
As of Tuesday afternoon, approximately half of Ardent’s 25 emergency rooms were still operating on “divert,” meaning that ambulances were being directed to other nearby hospitals for emergency care. Ardent spokesperson Will Roberts explained that hospitals often employ divert status during flu season, COVID surges, natural disasters, or major trauma events.
The ransomware attack also affected the University of Kansas Health System-St. Francis Campus in Topeka, among other hospitals in the Ardent Health Services company. Ardent has reported the incident to law enforcement and has enlisted the help of third-party forensic and threat intelligence advisors, as well as cybersecurity specialists, to restore IT functions as quickly as possible.
At this time, the full impact of the attack and the extent of data involved are still being determined. Ardent Health Services, based in Brentwood, Tennessee, owns and operates hospitals and care sites in Oklahoma, Texas, New Jersey, New Mexico, Idaho, and Kansas.
Ardent Health Services has not yet provided further comment on the incident.
Overall, this ransomware attack has disrupted healthcare operations and forced the diversion of patients to other hospitals in the affected areas. The investigation and restoration process is ongoing, and it remains to be seen how long it will take to fully recover from this cyberattack.
