Cyber Risks · Krebs on Security

Hospital Declares ‘Internal State of Emergency’ After Ransomware Infection

Summary: Methodist Hospital in Henderson, Kentucky declared an "internal state of emergency" after the Locky ransomware strain encrypted files across its systems, forcing it to shut down all desktop computers and bring them back online one at a time after scanning each for infection. The attack arrived via spam email about invoices with a booby-trapped attachment, and the attackers demanded four bitcoins, roughly $1,600, for the decryption key.

What's compelling: The hospital's information systems director said the ransomware spread from the initial infection to several other systems on the internal network, which is why every desktop had to come down - the same flat, reachable network that let a single email reach multiple machines is the exposure most organizations still carry.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related