{"id":6262,"date":"2018-01-17T16:50:09","date_gmt":"2018-01-17T21:50:09","guid":{"rendered":"http:\/\/www.hancockregionalhospital.org\/?p=6262"},"modified":"2018-01-17T16:50:09","modified_gmt":"2018-01-17T21:50:09","slug":"6262","status":"publish","type":"post","link":"https:\/\/www.hancockhealth.org\/es\/2018\/01\/6262\/","title":{"rendered":"Hancock Health Experiences Cyber Attack"},"content":{"rendered":"
Greenfield, IN – January 16, 2018<\/p>\n

At approximately 9:30 PM on Thursday, January 11, 2018, an unknown criminal group effectuated a ransomware attack against the information systems of Hancock Health. The point of entry of the attack was a hospital server on which the Remote Desktop Protocol (RDP) service was enabled and accessible via the Internet.\u00a0 Forensic analysis determined that an administrative account setup by a vendor of the hospital was compromised and used to gain unauthorized access to a specific system managed by that vendor.\u00a0 With this account, the attackers proceeded to infect a number of the hospital\u2019s information systems with the variant of ransomware known as SamSam, which in turn encrypted the data files on those systems with a private key held by them.<\/p>\n

The hospital\u2019s leadership, in following its incident response and crisis management plan, established contact with their legal representation at Hall-Render, and Indianapolis-based cyber security firm, Pondurance, LLC.\u00a0 The leadership team also made the decision to involve the FBI\u2019s cyber-crime task force team for advisory assistance. By Friday, January 12, 2018, the team had contained the incident and proceeded toward recovery of the infected systems.<\/p>\n

The hospital\u2019s leadership, upon consideration of many factors, made the determination to pay the ransom of four bitcoin demanded by the attackers, in order to retrieve the private encryption keys.\u00a0 Hancock Health CEO, Steve Long, made the following statement.<\/p>\n

\u201cWe were in a very precarious situation at the time of the attack.\u00a0 With the ice and snow storm at hand, coupled with the one of the worst flu seasons in memory, we wanted to recover our systems in the quickest way possible and avoid extending the burden toward other hospitals of diverting patients. Restoring from backup was considered, though we made the deliberate decision to pay the ransom to expedite our return to full operations.\u201d<\/p>\n

As part of the forensic analysis conducted by Pondurance, it appears that patient data was not transferred outside of the hospital\u2019s network.\u00a0 The FBI further confirmed during this investigation that the typical motivation of the criminal elements that leverage the SamSam ransomware is to obtain the ransom payment, not harvest patient data.<\/p>\n

As of late evening on Friday, January 12, 2018, the combined Hancock, Hall Render and Pondurance team was able to make the bitcoin transaction and receive the private keys from the attackers.\u00a0 Before restoration, and to ensure containment, the team enhanced the security posture of hospital systems and the network.\u00a0\u00a0 By Monday, January 15, 2018, critical systems were restored to normal production levels and the hospital was back online.<\/p>\n

The life-sustaining and support systems of the hospital remained unaffected during the ordeal, and patient safety was never at risk.<\/p><\/div>","protected":false},"excerpt":{"rendered":"

Greenfield, IN – January 16, 2018 At approximately 9:30 PM on Thursday, January 11, 2018, an unknown criminal group effectuated a ransomware attack against the information systems of Hancock Health. […]<\/p>\n","protected":false},"author":9,"featured_media":6221,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_tec_requires_first_save":true,"_EventAllDay":false,"_EventTimezone":"","_EventStartDate":"","_EventEndDate":"","_EventStartDateUTC":"","_EventEndDateUTC":"","_EventShowMap":false,"_EventShowMapLink":false,"_EventURL":"","_EventCost":"","_EventCostDescription":"","_EventCurrencySymbol":"","_EventCurrencyCode":"","_EventCurrencyPosition":"","_EventDateTimeSeparator":"","_EventTimeRangeSeparator":"","_EventOrganizerID":[],"_EventVenueID":[],"_OrganizerEmail":"","_OrganizerPhone":"","_OrganizerWebsite":"","_VenueAddress":"","_VenueCity":"","_VenueCountry":"","_VenueProvince":"","_VenueState":"","_VenueZip":"","_VenuePhone":"","_VenueURL":"","_VenueStateProvince":"","_VenueLat":"","_VenueLng":"","_VenueShowMap":false,"_VenueShowMapLink":false,"_tribe_blocks_recurrence_rules":"","_tribe_blocks_recurrence_description":"","_tribe_blocks_recurrence_exclusions":"","footnotes":""},"categories":[386],"tags":[],"service":[],"class_list":["post-6262","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":{"featured_image":6221,"page_title":"Hancock Health Experiences Cyber Attack","sub_header":"","display_overlay":false},"yoast_head":"\nHancock Health Experiences Cyber Attack - Hancock Health<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hancockhealth.org\/es\/2018\/01\/6262\/\" \/>\n<meta property=\"og:locale\" content=\"es_MX\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hancock Health Experiences Cyber Attack - Hancock Health\" \/>\n<meta property=\"og:description\" content=\"Greenfield, IN – January 16, 2018 At approximately 9:30 PM on Thursday, January 11, 2018, an unknown criminal group effectuated a ransomware attack against the information systems of Hancock Health. […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hancockhealth.org\/es\/2018\/01\/6262\/\" \/>\n<meta property=\"og:site_name\" content=\"Hancock Health\" \/>\n<meta property=\"article:published_time\" content=\"2018-01-17T21:50:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.hancockhealth.org\/wp-content\/uploads\/2018\/01\/GettyImages-465828156-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jenn\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jenn\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/\"},\"author\":{\"name\":\"Jenn\",\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/#\\\/schema\\\/person\\\/1442c1834c7614599ab5c82811b69805\"},\"headline\":\"Hancock Health Experiences Cyber Attack\",\"datePublished\":\"2018-01-17T21:50:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/\"},\"wordCount\":445,\"image\":{\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.hancockhealth.org\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/GettyImages-465828156-scaled.jpg\",\"articleSection\":[\"News\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/\",\"url\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/\",\"name\":\"Hancock Health Experiences Cyber Attack - Hancock Health\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.hancockhealth.org\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/GettyImages-465828156-scaled.jpg\",\"datePublished\":\"2018-01-17T21:50:09+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/#\\\/schema\\\/person\\\/1442c1834c7614599ab5c82811b69805\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.hancockhealth.org\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/GettyImages-465828156-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/www.hancockhealth.org\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/GettyImages-465828156-scaled.jpg\",\"width\":2560,\"height\":1707,\"caption\":\"News written on an old typewriter\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/2018\\\/01\\\/6262\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.hancockhealth.org\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hancock Health Experiences Cyber Attack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/#website\",\"url\":\"https:\\\/\\\/www.hancockhealth.org\\\/\",\"name\":\"Hancock Health\",\"description\":\"Explore a health network built around you.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.hancockhealth.org\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.hancockhealth.org\\\/#\\\/schema\\\/person\\\/1442c1834c7614599ab5c82811b69805\",\"name\":\"Jenn\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1422fd43ffa500b448b4d9eb75f04b0bd8be1f697d236658cbb884c9f3b5a3ee?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1422fd43ffa500b448b4d9eb75f04b0bd8be1f697d236658cbb884c9f3b5a3ee?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1422fd43ffa500b448b4d9eb75f04b0bd8be1f697d236658cbb884c9f3b5a3ee?s=96&d=mm&r=g\",\"caption\":\"Jenn\"},\"url\":\"https:\\\/\\\/www.hancockhealth.org\\\/es\\\/author\\\/jenn\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hancock Health Experiences Cyber Attack - Hancock Health","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hancockhealth.org\/es\/2018\/01\/6262\/","og_locale":"es_MX","og_type":"article","og_title":"Hancock Health Experiences Cyber Attack - Hancock Health","og_description":"Greenfield, IN – January 16, 2018 At approximately 9:30 PM on Thursday, January 11, 2018, an unknown criminal group effectuated a ransomware attack against the information systems of Hancock Health. […]","og_url":"https:\/\/www.hancockhealth.org\/es\/2018\/01\/6262\/","og_site_name":"Hancock Health","article_published_time":"2018-01-17T21:50:09+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/www.hancockhealth.org\/wp-content\/uploads\/2018\/01\/GettyImages-465828156-scaled.jpg","type":"image\/jpeg"}],"author":"Jenn","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Jenn","Tiempo de lectura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/#article","isPartOf":{"@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/"},"author":{"name":"Jenn","@id":"https:\/\/www.hancockhealth.org\/#\/schema\/person\/1442c1834c7614599ab5c82811b69805"},"headline":"Hancock Health Experiences Cyber Attack","datePublished":"2018-01-17T21:50:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/"},"wordCount":445,"image":{"@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hancockhealth.org\/wp-content\/uploads\/2018\/01\/GettyImages-465828156-scaled.jpg","articleSection":["News"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/","url":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/","name":"Hancock Health Experiences Cyber Attack - Hancock Health","isPartOf":{"@id":"https:\/\/www.hancockhealth.org\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/#primaryimage"},"image":{"@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hancockhealth.org\/wp-content\/uploads\/2018\/01\/GettyImages-465828156-scaled.jpg","datePublished":"2018-01-17T21:50:09+00:00","author":{"@id":"https:\/\/www.hancockhealth.org\/#\/schema\/person\/1442c1834c7614599ab5c82811b69805"},"breadcrumb":{"@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hancockhealth.org\/2018\/01\/6262\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/#primaryimage","url":"https:\/\/www.hancockhealth.org\/wp-content\/uploads\/2018\/01\/GettyImages-465828156-scaled.jpg","contentUrl":"https:\/\/www.hancockhealth.org\/wp-content\/uploads\/2018\/01\/GettyImages-465828156-scaled.jpg","width":2560,"height":1707,"caption":"News written on an old typewriter"},{"@type":"BreadcrumbList","@id":"https:\/\/www.hancockhealth.org\/2018\/01\/6262\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hancockhealth.org\/"},{"@type":"ListItem","position":2,"name":"Hancock Health Experiences Cyber Attack"}]},{"@type":"WebSite","@id":"https:\/\/www.hancockhealth.org\/#website","url":"https:\/\/www.hancockhealth.org\/","name":"Salud Hancock","description":"Explore a health network built around you.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hancockhealth.org\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/www.hancockhealth.org\/#\/schema\/person\/1442c1834c7614599ab5c82811b69805","name":"Jenn","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/1422fd43ffa500b448b4d9eb75f04b0bd8be1f697d236658cbb884c9f3b5a3ee?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/1422fd43ffa500b448b4d9eb75f04b0bd8be1f697d236658cbb884c9f3b5a3ee?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1422fd43ffa500b448b4d9eb75f04b0bd8be1f697d236658cbb884c9f3b5a3ee?s=96&d=mm&r=g","caption":"Jenn"},"url":"https:\/\/www.hancockhealth.org\/es\/author\/jenn\/"}]}},"_links":{"self":[{"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/posts\/6262","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/comments?post=6262"}],"version-history":[{"count":0,"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/posts\/6262\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/media\/6221"}],"wp:attachment":[{"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/media?parent=6262"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/categories?post=6262"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/tags?post=6262"},{"taxonomy":"service","embeddable":true,"href":"https:\/\/www.hancockhealth.org\/es\/wp-json\/wp\/v2\/service?post=6262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}