Report: Alabama hospitals pay hackers in ransomware attack

An Alabama hospital system that quit accepting new patients after a ransomware attack said Saturday it had gotten a key to unlock its computer systems.

A statement from DCH Health Systems didn't say how the three-hospital system got the information needed to unlock its data. But The Tuscaloosa News quoted spokesman Brad Fisher as saying the hospital system paid the attackers.

"For ongoing security reasons, we will be keeping confidential specific details about the investigation and our coordination with the attacker," Fisher told the newspaper.

Deloitte

Here’s how to make virtual health a pillar of your health plan members’ experience

Nearly all health plans (94 percent) offer virtual health services, and 96 percent expect their reliance on this technology will grow, according to the results of a survey conducted by America’s Health Insurance Plans (AHIP.

read more

The company stopped accepting new patients at its hospitals in Tuscaloosa, Northport and Fayette because of a ransomware attack that hit early Tuesday. New patients were sent to hospitals in Birmingham and Mississippi.

Hospitals will continue diverting all but the most critically ill patients through the weekend, the statement said.

The hospitals said hackers used the ransomware variant Ryuk to lock its files, but the hack didn't compromise the care of patients. Workers reverted to using paper files.

The three hospitals, which mostly serve west Alabama, have about 850 beds total and admitted more than 32,000 patients last year.