Starling Physicians Hospital Hit By Ransomware

Starling Physicians is a hospital hit by ransomware which compromised sensitive informationsuch as passport numbers and Social Security numbers.

On Feb. 8, 2019, Starling Physicians was reportedly targeted by a ransomware attack during which a third party gained access to employee email accounts. When the company learned of the breach, they reportedly secured their email accounts and hired a forensic security firm to determine the impact of the attack.

Although the breach occurred in February, Starling notes that the investigation did not conclude until Sept. 12, 2019 – causing a “delay” in notifying patients.

According to Starling Physicians’ notice, the investigation concluded that a variety of information may have been affected by the breach, including patients’ names, addresses, dates of birth, passport numbers, Social Security numbers, medical information, and health insurance or billing information.

The breach reportedly affected only .01 percent of their patient population. Patients whose Social Security numbers were compromised have reportedly been reached out to with an offer of complimentary credit monitoring and identity theft protection services.

“Starling encourages its patients to remain vigilant to the possibility of fraud and identity theft by reviewing credit card, bank, and other financial statements, as well as claims made using their insurance for any unauthorized activity,” the notice adds.

If patients think they have been the victim of fraud, they are encouraged to take action and report the problem to local and state authorities. Starling Physicians also invited consumers to contact them at 1-888-800-3306 (Monday through Friday, 8 am to 5 pm) if they have further questions or concerns.

“Starling Physicians values and respects the privacy of our patients’ information and takes protecting your privacy seriously,” the health system says.

Hospital Hit by Ransomware

This year, there have been hundreds of ransomware attacks targeting a variety of organizations – including a significant number of hospitals. Ransomware attacks are named for the way that hackers hold systems hostage until the organization pays a sum of money.

There have been 621 cyberattacks in 2019, according to CBS News. These attacks are reportedly associated with costs over $186 million.

In addition to costs associated with ransomware attacks, a healthcare attack can also have consequences for patients.

A hospital hit by ransomware may have appointments canceled or moved, leading to problems for patients. If a hospital’s systems are taken down, they may not be able to sufficiently care for patients. Some hospitals have even had to close their doors to all but emergency patients due to the system disruptions.

More recently, a study found that hospitals hit by ransomware are associated with a slower response to cardiac patients in need of critical care.

Researchers from Vanderbilt University and the University of Central Florida measured the time it took for a potential heart attack patient to get to the EKG room after entering the emergency room. Times reportedly increased by as much as 2.7 minutes after the ransomware attacks. Even three to four years after an attack, times were reportedly increased by as much as 2 minutes.

Although 2 minutes may not seem like much, this time can be vital when it comes to critical cardiac patients.

The researchers also looked at the 30-day mortality rates for heart attacks and found that there were as many as 36 additional deaths per every 10,000 heart attacks each year at the hundreds of hospitals attacked by ransomware.

Due to these very real consequences, cyber security experts have stressed the importance of keeping important information locked behind significant safeguards. These safeguards help a hospital hit by ransomware mitigate the most extreme consequences of an attack.

Join a Free Hospital Ransomware Attack Class Action Lawsuit Investigation

If you were a patient at a hospital or healthcare facility affected by a ransomware attack that impacted your medical care, you may qualify to join a hospital ransomware attack class action lawsuit investigation.

Learn More

This article is not legal advice. It is presented
for informational purposes only.