Ascension Ransomware Attack: US Hospital Network Crippled, Patient Data Stolen

Healthcare Is Back in Cybercriminals' Crosshairs

The US healthcare sector is going through another rough stretch. In recent days, the fallout from the cyberattack on Ascension, one of the largest nonprofit healthcare providers in the United States, has been making headlines. The attack itself happened several months ago, but its effects are still being felt, and the case has just entered a new phase in the courtroom.

Systems Down, Data Stolen

The ransomware attack hit in the spring and completely shut down the network's IT systems. Hospitals had to cancel scheduled procedures, ambulances were diverted to other facilities, and medical staff had to go back to paper records. Picture the chaos: in the 21st century, a doctor reaches for a pen and a paper chart instead of a computer, at a time when seconds can mean the difference between life and death.

Worse still, the attackers stole sensitive patient data. This goes beyond contact details to include medical histories and insurance numbers. Some of this information has already turned up on dark web forums.

Court Gives the Green Light to a Class Action

The latest development comes from the courtroom. In late September, a federal judge denied Ascension's motion to dismiss a class action filed by patients. The court found the allegations of negligent data protection credible enough for the case to move forward. The patients claim the hospital network failed to put adequate security measures in place, and that this failure led directly to a devastating data breach.

The incident is another wake-up call for the entire healthcare industry. Healthcare organizations hold some of our most valuable data, yet they remain one of cybercriminals' top targets. Modern ransomware strains such as BlackCat 3.0 and Akira (which has already collected $244 million in ransom payments) are becoming more sophisticated and more ruthless.