On Wednesday, January 31, based on evidence of suspicious activity and consistent with best practices, Lurie Children’s Health took their systems offline, including phone, e-mail, electronic medical records system, and MyChart, a patient family portal. They did this to protect the information of their patients, workforce and organization.
They can confirm that their network was accessed by a known criminal threat actor.
Related: HHS Releases Voluntary Cybersecurity Performance Goals
They have been working closely, around the clock, with outside and internal experts and in collaboration with law enforcement, including the FBI. This is an active and ongoing investigation. As an academic medical center, their systems are highly complex, and these incidents can take time to resolve.
Throughout this period, all Lurie Children’s locations have remained open, accepting and caring for patients with as few disruptions as possible.
They implemented their emergency preparedness plans, including downtime procedures throughout the organization.
What 'Light' Daily Cleaning of Patient Rooms Misses
Sprinkler Compliance: Navigating Code Mandates, Renovation Triggers and Patient Safety
MUSC Board of Trustees Approves $1.1B South Carolina Cancer Hospital
Study Outlines Hand Hygiene Guidelines for EVS Staff
McCarthy Completes $65M Sharp Rees-Stealy Kearny Mesa MOB Modernization