Indiana health network pays about $55,000 ransom to hackers

stethoscope

A suburban Indianapolis health network said it paid a $55,000 ransom to hackers to regain access to hospital computer systems, making it the latest health system around the globe targeted by money-seeking hackers.

Posted: Jan 18, 2018 5:55 PM

GREENFIELD, Ind. (AP) — A suburban Indianapolis health network said it paid a $55,000 ransom to hackers to regain access to hospital computer systems, making it the latest health system around the globe targeted by money-seeking hackers.

Hancock Health said an "unidentified criminal group" initiated the attack late last week and targeted more than 1,400 files. The health system said it was given seven days to pay a ransom in bitcoins, and after the virtual currency was transferred, its staff regained access to the computer systems.

Hancock Health said it found no evidence that patient information was adversely affected. At the time of the transfer, the four-bitcoin ransom was worth about $55,000, The Daily Reporter of Greenfield reported.

Hancock Health includes about two dozen health care facilities, including Hancock Regional Hospital in Greenfield, about 15 miles (24 kilometers) east of Indianapolis. An FBI spokeswoman said the agency was investigating the attack, but she declined further comment.

Hancock Health CEO Steve Long said the hackers are believed to be in eastern Europe and may have used a type of ransomware called SamSam, which is strategic about its ransom amounts and the methods for victims to pay up.

"These folks have an interesting business model. They make it just easy enough" to pay the ransom, Long told The Daily Reporter. "They price it right."

He told WRTV the ransom was paid "to expedite our return to full operations."

Ransomware attacks are on the rise around the world. In February 2016, the Hollywood Presbyterian Medical Center in California said it paid a $17,000 ransom to regain control of its computers from hackers. And last May, a global ransomware attack infected hundreds of thousands of computers worldwide and crippled parts of Britain's National Health Service, leading to thousands of canceled appointments and operations.

The National Health Service computers systems were eventually restored after a British hacker discovered a "kill switch" in the original hacker's code and managed to trip that switch.

An Indiana cancer services agency was hit in January 2017 by hackers who demanded a ransom of 50 bitcoins, or about $43,000, for access to its data. The Muncie-based Cancer Services of East Central Indiana-Little Red Door didn't pay that ransom and instead replaced its data system. But in late 2016, central Indiana's Madison County paid hackers $21,000 to obtain encryption keys to regain access to government data stored in its computer system.

A 2016 report by Cisco Systems Inc. found that the same type of ransomware used in Thursday's attack in Indiana is a virus that exploits computer server vulnerabilities without requiring human interaction. Hackers use such software to target large-scale networks and hold data hostage by encrypting it to make it unreadable until the targeted entities pay requested ransoms.

The same virus hit the MedStar Health Inc. hospital chain in the U.S. in 2016. MedStar said at the time that it paid nothing to the hackers.

Copyright 2018 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

West Lafayette
Few Clouds
76° wxIcon
Hi: 86° Lo: 62°
Feels Like: 76°
Kokomo
Clear
69° wxIcon
Hi: 84° Lo: 59°
Feels Like: 69°
Rensselaer
Clear
66° wxIcon
Hi: 82° Lo: 58°
Feels Like: 66°
Fowler
Clear
66° wxIcon
Hi: 83° Lo: 60°
Feels Like: 66°
Williamsport
Clear
69° wxIcon
Hi: 85° Lo: 62°
Feels Like: 69°
Crawfordsville
Scattered Clouds
69° wxIcon
Hi: 83° Lo: 64°
Feels Like: 69°
Frankfort
Clear
68° wxIcon
Hi: 82° Lo: 61°
Feels Like: 68°
Delphi
Clear
68° wxIcon
Hi: 85° Lo: 60°
Feels Like: 68°
Monticello
Clear
68° wxIcon
Hi: 86° Lo: 59°
Feels Like: 68°
Logansport
Clear
70° wxIcon
Hi: 83° Lo: 58°
Feels Like: 70°
Turning Warmer & More Humid, Then Big Cool-Down
WLFI Radar
WLFI Temps
WLFI Planner

Indiana Coronavirus Cases

Data is updated nightly.

Confirmed Cases: 76522

Reported Deaths: 3086
CountyConfirmedDeaths
Marion16194731
Lake7742281
Elkhart495586
Allen4040163
St. Joseph361083
Hamilton2887104
Vanderburgh205313
Hendricks1943108
Cass18069
Johnson1794119
Porter136239
Clark130750
Tippecanoe124511
Madison103066
LaPorte93530
Howard92065
Kosciusko87212
Floyd82249
Bartholomew82147
Marshall79423
Monroe76732
Delaware76052
Vigo71411
Dubois71312
Boone69746
Noble69029
Hancock68839
Jackson5975
Warrick58830
Shelby56828
LaGrange56610
Grant53130
Dearborn51628
Morgan48934
Clinton4504
Henry41820
Wayne38810
White37711
Montgomery36021
Lawrence35727
Harrison35224
Decatur34232
Putnam3218
Daviess27920
Miami2772
Scott27310
Jasper2572
Greene25434
Franklin24715
DeKalb2384
Gibson2334
Jennings22812
Steuben2153
Ripley2138
Carroll2003
Fayette1957
Perry18713
Posey1800
Starke1807
Orange17824
Wells1782
Fulton1732
Wabash1715
Jefferson1662
Knox1640
Whitley1566
Tipton14912
Washington1441
Sullivan1411
Spencer1393
Clay1315
Huntington1273
Randolph1274
Newton12110
Adams1172
Owen1051
Jay920
Rush894
Pulaski821
Fountain762
Brown752
Blackford662
Ohio656
Benton640
Pike620
Vermillion590
Parke551
Switzerland530
Martin500
Crawford450
Union410
Warren241
Unassigned0208

COVID-19 Important links and resources

As the spread of COVID-19, or as it's more commonly known as the coronavirus continues, this page will serve as your one-stop for the resources you need to stay informed and to keep you and your family safe. CLICK HERE

Closings related to the prevention of the COVID-19 can be found on our Closings page.

Community Events