Massachusetts-based Anna Jaques Hospital was admitted to be compromised by the Money Message ransomware gang in a Christmas Day attack, which it claims resulted in the exfiltration of 600GB of data, as well as information from Beth Israel Lahey Health, which manages AJH, reports The Record, a news site by cybersecurity firm Recorded Future.
Several issues affecting the state’s e-filing system, protection order portal, appellate case system, attorney state registry, district court public access portal, case management system, and online marriage license application system were initially discovered on Oct. 12, said the Supreme Court, which has been continuing operations with the temporary use of paper records.
“We continue to serve our communities, but we are using different methods until our systems are restored,” said Chief Justice Marla Luckert, who added that an investigation into the incident is already underway.
Such an attack comes after the Regional Justice Information System leveraged by Kansas, Illinois, and Missouri counties was reported to be taken down by a cyberattack last month.
Southern Arkansas University is recovering from an attack against its computer servers.
A statement said SAU is responding to a security incident that disrupted access to university systems and applications.
“While access to some systems remain offline, access to faculty, staff, and student email and the Blackboard learning management system are operational.
“SAU is working with independent forensic specialists to investigate the situation and will take all appropriate actions in response to its findings,” the statement said.
“We have notified law enforcement and will continue to actively monitor our networks and take appropriate actions to protect our systems in line with our incident response protocols,” the statement said.
A ransomware attack this week on a California-based health care system forced some of its locations to close and left others to rely on paper records.
The system, Prospect Medical Holdings, which operates 16 hospitals and more than 165 clinics and outpatient centers in Connecticut, Pennsylvania, Rhode Island and Southern California, announced the cyberattack on Thursday.
A Prospect Medical spokesman could not estimate on Saturday when services would return to normal. It was not immediately clear how many of the system’s sites were affected.
On its website, Eastern Connecticut Health Network, an affiliate of Prospect Medical, listed locations that would be closed until further notice, including a medical imaging center, an urgent care facility and an outpatient blood-draw center, among others.
CharterCARE Health Partners, a Rhode Island affiliate, said on Facebook Thursday that it had to reschedule some of its appointments and to revert to paper records. The Philadelphia Inquirer reported that computers were also down at Crozer Health facilities in Delaware County.
“Prospect Medical Holdings, Inc. recently experienced a data security incident that has disrupted our operations,” the company said in a statement on Saturday. “Upon learning of this, we took our systems offline to protect them and launched an investigation with the help of third-party cybersecurity specialists.”
The company said it was focused on “addressing the pressing needs of our patients as we work diligently to return to normal operations as quickly as possible.”
It did not provide details on the nature of the security breach.
Waterbury Hospital, in Waterbury, Conn., said on Saturday that it was continuing to have disruptions. It also said that some of its outpatient and diagnostic imaging services had not been available on Friday or Saturday. On Thursday, it said it was relying on paper records.
Cyberattacks on hospitals have become more common, said John Riggi, senior cybersecurity adviser to the American Hospital Association.
In 2022, One Brooklyn Health, a hospital group that serves low-income neighborhoods in New York, was hit by a cyberattack that also forced staff members to use paper records….