Officials Confirm Breach and Ongoing Investigation
A major children’s hospital in Chicago, Lurie Children’s Hospital, is still recovering from a debilitating cyberattack that began over a week ago. The attack has left doctors and nurses unable to access digital patient records and has severely limited communication between parents and caregivers. Officials at the hospital have stated that they are actively working with the FBI and other law enforcement agencies to address the situation. The hospital’s own systems for phone, email, and medical records were shut down immediately after the breach was discovered on January 31.
Dr. Marcelo Malakooti, Lurie’s chief medical officer, emphasized the seriousness of the matter and the hospital’s dedication to resolving it. He stated, “We take this matter very seriously and have been working closely around the clock with outside and internal experts and in collaboration with law enforcement, including the FBI. This is an active and ongoing investigation.”
Possible Ransomware Attack Suspected
While hospital officials have not confirmed the cause of the cyberattack, it bears the hallmarks of a ransomware attack. These types of attacks involve criminal groups encrypting data, records, or other critical information and demanding payment in exchange for its release. Allan Liska, an analyst with cybersecurity firm Recorded Future, believes that the description provided by Lurie officials suggests that the attack may be the work of a well-known criminal group targeted by U.S. law enforcement.
The FBI in Chicago has not provided further information but has confirmed an ongoing investigation. The Department of Health and Human Services warned last year that health care providers have increasingly become targets of cybercriminals, resulting in delayed or disrupted care for patients nationwide.
Patient Care Impacted, Support from Community
Lurie Children’s Hospital has directed patients to use a call center for assistance and has assured them that help is available for prescription refills, appointment discussions, and reaching health care providers. However, some parents have reported that the center is struggling to meet their needs, leaving them uncertain about when they will receive answers.
Brett Callow, a threat analyst with cybersecurity firm Emsisoft, explained that it can take weeks for a hospital to fully restore normal operations after a cyberattack, with critical systems being prioritized first. Lurie Children’s Hospital treated approximately 260,000 patients last year, according to their annual report. Pediatrician practices in the Chicago area that collaborate with the hospital have also reported difficulties in accessing digital medical records due to the attack.
The hospital expressed gratitude for the support received from the community and commended the dedication and resilience of its workforce in fulfilling their mission.
