The Tennessee-based Ardent Health Services has fallen victim to a ransomware attack that could disrupt operations and affect numerous individuals.
This impacted entity is one of the most significant healthcare providers in the state, operating 30 hospitals and over 200 healthcare facilities across six states. The organisation, headquartered in Brentwood, announced on its website that its investigation uncovered the incident last week.
To isolate the attack, the healthcare provider responded promptly by disconnecting its network and suspending user access to critical information technology applications, corporate servers, Epic software, the internet, and clinical programs.
In addition, the severity of the situation prompted the organisation to transfer or redirect some patients and reschedule or cancel procedures. Ardent also notified law enforcement of the incident and employed a third-party security provider to assess the cyberattack.
Ardent Health Services assured everyone they would not let the attack disrupt their operations.
Based on reports, Ardent Health Services assured the public that it will continue to deliver patient care safely and effectively in its hospitals, emergency rooms, and clinics. However, the organisation faces challenges, with certain facilities rescheduling non-emergent, elective procedures and redirecting emergency room patients to other hospitals until standard systems resume.
Ardent is actively working to restore its IT operations, implementing additional security protocols to protect sensitive data. The restoration process includes bringing back access to electronic medical records and other clinical systems, though the investigation has yet to determine the full scope of the cyberattack. The organisation emphasised that it is too early to confirm the extent of compromised patient health or financial data.
This campaign is the latest addition to the growing list of ransomware attacks on healthcare providers in the United States, Canada, and beyond. Recently, TransForm Shared Service Organization, servicing hospitals in Ontario, fell victim to a similar attack, underlining the increasing threat healthcare organisations face worldwide.
The healthcare industry should improve its cybersecurity protocols since the recent threat campaigns have broader implications for patient care, data security, and the integrity of critical infrastructure in the face of evolving cyber threats.