Lehigh Valley Health Network says it was target of cyberattack by ransomware gang
The health network is investigating the scope of the attack, but says services have not been disrupted.
SCRANTON, Pennsylvania (WPVI) -- The Lehigh Valley Health Network says it was the target of a cyberattack by a ransomware gang with suspected ties to Russia.
LVHN says it detected "unauthorized activity within our IT system" on Feb. 6.
Hackers entered the computer system used for patient images at a physician practice in Lackawanna County.
The health network is investigating the scope of the attack, but says services have not been disrupted.
The Lehigh Valley Health Network has refused to pay a ransom.
Dr. Brian Nester, President and CEO of Lehigh Valley Health Network, released this statement Monday:
"Lehigh Valley Health Network (LVHN) has been the target of a cybersecurity attack by a ransomware gang, known as BlackCat, which has been associated with Russia. As of today, the attack has not disrupted LVHN's operations. Based on our initial analysis, the attack was on the network supporting one physician practice located in Lackawanna County. We take this very seriously and protecting the data security and privacy of our patients, physicians and staff is critical.
On February 6, LVHN detected unauthorized activity within our IT system. Our Technology team identified the unauthorized activity, and we immediately launched an investigation, engaged leading cybersecurity firms and experts, and notified law enforcement. We are continuing to work with our experts to investigate the scope of the incident and as of today, we continue to operate normally.
Although our investigation is ongoing, as of today, our initial analysis shows that the incident involved a computer system used for clinically appropriate patient images for radiation oncology treatment and other sensitive information. BlackCat demanded a ransom payment, but LVHN refused to pay this criminal enterprise. We understand that BlackCat has targeted other organizations in the academic and healthcare sectors.
We are continuing to work closely with our cybersecurity experts to evaluate the information involved and will provide notices to individuals as required as soon as possible. Attacks like this are reprehensible and we are dedicating appropriate resources to respond to this incident."
