Columbia Surgical Specialists Pays $14K to Ransomware Thieves

According to a statement released by the physician owners of Columbia Surgical Specialists, the Washington-based medical center paid thousands in ransom in order to regain access to patient data after a ransomware attack.

Columbia Surgical Specialists Pay $14,000 to Hackers

According to the medical center, it learned of the ransomware attack that had compromised patient information on Jan. 9, 2019. The attack encrypted the center’s computer files and systems, potentially compromising sensitive patient information such as Social Security numbers, patient names, and health data.

The hackers who took control of the medical center’s systems told Columbia Surgical Specialist officials that they would not release the information without payment of a ransom of over $14,000. Due to the sensitive nature of the information, as well as the potential damage to the health and wellness of the center’s patients posed by not restoring the systems, Columbia Surgical Specialists agreed to pay the ransom in exchange for the decryption key to unlock the data.

According to the medical center, up to 400,000 patients may have been impacted by the ransomware breach. However, the IT security provider for Columbia Surgical Specialists has stated that although the data of thousands of patients was encrypted by the hackers, it is unlikely that the hackers were able to access any sensitive information.

To Pay or Not to Pay?

The Federal Bureau of Investigation and cybersecurity experts generally warn against paying ransoms to criminals who hack into medical center systems. According to them, complying with these demands and sending money to the hackers will only incentivize them and encourage them to launch future attacks.

Hospitals and medical centers who have been hit with ransomware attacks have a tough choice to make, however. By not paying the ransom, they may be losing important patient information and medical records forever. Moreover, the security of patients will be at risk.

Hospitals whose systems have been compromised by ransomware attacks may also be slower to respond to patient needs, as it disrupts patient services, and be forced to rely on memory or written charts to log patient medications and other data.

Costs and Effects of Ransomware Attacks

Ransomware attacks against hospitals have been on the rise for the past several years, with cyber-attacks and data breaches costing US healthcare providers around $4 billion in 2019.

In addition to the high price of ransomware attacks, these breaches may have disastrous consequences for patients whose data was revealed to third-parties. As in the case of Columbia Surgical Specialists, patient information at risk of being compromised by a data breach includes Social Security numbers, full names, birth dates, addresses, member ID numbers, medical histories, and claims information. If this data is accessed by criminals, patients may be subject to identity theft, financial theft, blackmail, or other negative consequences.

If you are a patient of Columbia Surgical Specialists, your information may have been affected by the recent ransomware attack. Hiring a qualified attorney to review your case may help you to determine what your legal rights and options are. Some patients may be eligible to join a class action investigation or lawsuit regarding patient data privacy violations.

Join a Free Hospital Ransomware Attack Class Action Lawsuit Investigation

If you were a patient at a hospital or healthcare facility affected by a ransomware attack that impacted your medical care, you may qualify to join a hospital ransomware attack class action lawsuit investigation.

Learn More

This article is not legal advice. It is presented
for informational purposes only.