{"id":651,"date":"2024-10-01T17:13:19","date_gmt":"2024-10-01T23:13:19","guid":{"rendered":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/?p=651"},"modified":"2024-10-01T17:13:23","modified_gmt":"2024-10-01T23:13:23","slug":"ransomware-attack-on-university-medical-center-umc","status":"publish","type":"post","link":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/2024\/10\/01\/ransomware-attack-on-university-medical-center-umc\/","title":{"rendered":"Ransomware Attack on University Medical Center (UMC)"},"content":{"rendered":"\n<div class=\"wp-block-cover\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-background-dim\" style=\"background-color:#787878\"><\/span><img decoding=\"async\" width=\"2560\" height=\"2560\" class=\"wp-block-cover__image-background wp-image-656 lazyload\" alt=\"\" data-src=\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-scaled.jpg\" data-object-fit=\"cover\" data-srcset=\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-scaled.jpg 2560w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-300x300.jpg 300w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-1024x1024.jpg 1024w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-150x150.jpg 150w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-768x768.jpg 768w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-1536x1536.jpg 1536w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-2048x2048.jpg 2048w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-600x600.jpg 600w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/vecteezy_word-on-laptop_7402172-1-1568x1568.jpg 1568w\" data-sizes=\"(max-width: 2560px) 100vw, 2560px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 2560px; --smush-placeholder-aspect-ratio: 2560\/2560;\" \/><div class=\"wp-block-cover__inner-container is-layout-constrained wp-block-cover-is-layout-constrained\">\n<p class=\"has-text-align-center has-large-font-size wp-block-paragraph\"><\/p>\n<\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\">Introduction:<\/h2>\n\n\n\n<p class=\"has-text-align-left has-normal-font-size wp-block-paragraph\">At present, the healthcare system has become one of the most popular targets for cybercriminals. Cyberattacks on hospitals as well as on medical centers have increased drastically in recent years. On 26 September 2024, the University Medical Centre (UMC) Health System in Lubbock, Texas, was hit by a serious ransomware attack. This attack affected the crucial medical services and raised a concern about national security and how well the healthcare sector protects its patient\u2019s information and their systems [1] [2]. This incident serves as a critical warning for us that to safeguard the healthcare system, we require good cybersecurity practices.<\/p>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\">Immediate effects and reactions:<\/h2>\n\n\n\n<p class=\"has-normal-font-size wp-block-paragraph\">University Medical Centre (UMC) Health System, which is the only level 1 trauma center in a 400-mile radius, was attacked by a ransomware attack and forced UMC to take some strong immediate action. As a result, UMC took the following steps:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"has-normal-font-size\">Both emergency and non-emergency patients have been diverted to other local healthcare facilities via ambulance since September 26 [3].<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"has-normal-font-size\">UMC disconnected its systems because of \u201cunusual activity\u201d resulting from a ransomware attack [3].<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"has-normal-font-size\">There has been a failure in the phone system and patient portals [3]. UMC posted this on Facebook [4].<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" width=\"980\" height=\"284\" data-src=\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/image.png\" alt=\"\" class=\"wp-image-657 lazyload\" style=\"--smush-placeholder-width: 980px; --smush-placeholder-aspect-ratio: 980\/284;width:966px;height:auto\" data-srcset=\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/image.png 980w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/image-300x87.png 300w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/image-768x223.png 768w\" data-sizes=\"(max-width: 980px) 100vw, 980px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center has-small-font-size wp-block-paragraph\"><strong>Figure 1 :Screenshot of a Facebook post by UMC Health System, UMC Health System Facebook Page, dated September 26, 2024 [4].<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"has-normal-font-size\">A website was launched by the UMC Health Center to provide updates about the incident on 27 September [3]. The website link is as follows: <a href=\"https:\/\/www.umchealthsystem.com\/it-outage\/\">https:\/\/www.umchealthsystem.com\/it-outage\/<\/a><\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"has-normal-font-size\">The health system brought third-party experts who have helped other hospitals with the same problems for recovery [1] [3].<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"has-normal-font-size\">Even after the attack, the UMC Health Center managed to keep its emergency centers, urgent care clinics, and physician practices operational [1] [3].<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\">Phases of Ransomware Attack:<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">John Riggi, National Advisor for Cybersecurity and Risk at the American Hospital Association, stated that there are two phases of a ransomware attack:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Infiltration:<\/strong> Bad actors are gaining unauthorized access to the network, usually by working with a group that has speciality to identify the possible targets [1] [7].<\/li>\n\n\n\n<li><strong>Execution:<\/strong> Once the attackers get unauthorized access to the system, they encrypt the sensitive information and may steal crucial information and hold it for the ransom [1] [7].<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"975\" height=\"821\" data-src=\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/image-1.png\" alt=\"\" class=\"wp-image-658 lazyload\" style=\"--smush-placeholder-width: 975px; --smush-placeholder-aspect-ratio: 975\/821;width:884px;height:auto\" data-srcset=\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/image-1.png 975w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/image-1-300x253.png 300w, https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-content\/uploads\/sites\/119\/2024\/10\/image-1-768x647.png 768w\" data-sizes=\"(max-width: 975px) 100vw, 975px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" \/><\/figure>\n<\/div>\n\n\n<p class=\"has-text-align-center has-small-font-size wp-block-paragraph\"><strong>Figure 2: &#8220;How Ransomware Attack works&#8221; Image source: Trilogix Cloud. Accessed on 30 September,2024 [5]<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\">Current situation at University Medical Center:<\/h2>\n\n\n\n<p class=\"has-normal-font-size wp-block-paragraph\">The UMC Health Center team is working hard to restore and recover things. The teams are working constantly, with the help of third-party experts, to check and address the issue. The investigation into this event is still ongoing. UMC Health Center will keep giving important news to their patients and community about the attack [6]. <\/p>\n\n\n\n<p class=\"has-normal-font-size wp-block-paragraph\">Right now, there is no specific timeline for restoration of service. After a ransomware attack, systems usually take about a month to get back to normal. UMC said, &#8220;We continue to carefully evaluate our operations with patient safety in mind.&#8221; We will only bring back services when it is safe [3].<\/p>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\">A National Security Concern:<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">John Riggi, National Advisor for Cybersecurity and Risk at the American Hospital Association, classified this incident as a national security concern. He added that \u201cwhen hospitals are attacked, lives are threatened.\u201d When there is only 1 trauma center in a 400-mile radius and that is also shut down by foreign bad actors, making ambulances on diversion, you are putting people&#8217;s lives at risk, Riggi said. Riggi says that Russian crime groups, which often get protection from the Russian government, are mainly the ones behind these attacks. The FBI\u2019s authority and power are limited when the attack is organized from the different countries. He also said that to effectively handle the increase in advanced cyber attacks, hospital systems will need help [7].<\/p>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\">Conclusion:<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The ransomware attack on University Medical Center is a warning for the entire healthcare industry. As the cybercriminals are using more powerful and smarter tools, the healthcare sector is required to focus more on protecting their systems and thereby, protecting their patient\u2019s data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In conclusion, UMC&#8217;s experience is a lesson for itself and other healthcare groups to improve their security against possible attacks. It&#8217;s very important for the field like healthcare to take these threats more seriously and work accordingly to protect their system against threats in the future.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">References:<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.betterworldtechnology.com\/post\/ransomware-attack-on-umc-deemed-a-national-security-issue\">https:\/\/www.betterworldtechnology.com\/post\/ransomware-attack-on-umc-deemed-a-national-security-issue<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.hipaajournal.com\/umc-health-system-responding-to-ransomware-attack\/\">https:\/\/www.hipaajournal.com\/umc-health-system-responding-to-ransomware-attack\/<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.beckershospitalreview.com\/cybersecurity\/texas-health-system-confirms-ransomware-attack-6-things-to-know.html\">https:\/\/www.beckershospitalreview.com\/cybersecurity\/texas-health-system-confirms-ransomware-attack-6-things-to-know.html<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.facebook.com\/UMCHealthSystem\/posts\/pfbid021sT6cDyjhDxYEjj9YE6mD65twTCT14JbzkNbyLiq6oKsWZGSjcuGWVEUwbeQYkJVl?rdid=ISlgc3KcfLaZEpxF\">https:\/\/www.facebook.com\/UMCHealthSystem\/posts\/pfbid021sT6cDyjhDxYEjj9YE6mD65twTCT14JbzkNbyLiq6oKsWZGSjcuGWVEUwbeQYkJVl?rdid=ISlgc3KcfLaZEpxF<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/trilogix.cloud\/cloud-design-goals\/surviving-ransomware-attacks\/\">https:\/\/trilogix.cloud\/cloud-design-goals\/surviving-ransomware-attacks\/<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.umchealthsystem.com\/it-outage\/\">https:\/\/www.umchealthsystem.com\/it-outage\/<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.kcbd.com\/2024\/09\/28\/cyber-security-expert-calls-ransomware-attack-umc-national-security-issue\/\">https:\/\/www.kcbd.com\/2024\/09\/28\/cyber-security-expert-calls-ransomware-attack-umc-national-security-issue\/<\/a><\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Introduction: At present, the healthcare system has become one of the most popular targets for cybercriminals. Cyberattacks on hospitals as well as on medical centers have increased drastically in recent years. On 26 September 2024, the University Medical Centre (UMC) Health System in Lubbock, Texas, was hit by a serious ransomware attack. This attack affected &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/2024\/10\/01\/ransomware-attack-on-university-medical-center-umc\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Ransomware Attack on University Medical Center (UMC)&#8221;<\/span><\/a><\/p>\n","protected":false},"author":693,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[1],"tags":[28,11],"class_list":["post-651","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-isec601","tag-security","entry"],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Akshar Ketanbhai Patel","author_link":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/author\/akshar-ketanbhai-patel\/"},"_links":{"self":[{"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/posts\/651","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/users\/693"}],"replies":[{"embeddable":true,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/comments?post=651"}],"version-history":[{"count":1,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/posts\/651\/revisions"}],"predecessor-version":[{"id":659,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/posts\/651\/revisions\/659"}],"wp:attachment":[{"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/media?parent=651"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/categories?post=651"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/wp-json\/wp\/v2\/tags?post=651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}