Incident

Ransomware attack affects trauma, stroke care at Richmond University Medical Center

Take action: Never fully rely on computers and automation. Have a plan in place to switch to manual operations to ensure continuity of services in case of a disruption - whether by system failure or ransomware.


Learn More

Richmond University Medical Center (RUMC) in West Brighton, Staten Island, has recently been targeted by a ransomware attack, resulting in an ongoing network outage at the hospital. RUMC is actively investigating the incident and working with third-party cybersecurity experts to assess the vulnerability of information and restore system functionality. The attack has caused various complications, including intermittent outages since Friday and the need for manual data entry and individual patient monitoring by nurses. It is unclear if RUMC has received a specific ransom demand or intends to make any payment.

Despite the challenges, RUMC continues to provide full services, including emergency care, admissions, and outpatient, inpatient, and surgical services, with minimal disruptions except for overnight trauma and stroke services.

Update - as of 3rd January 2025, RUMC reports that the breach affected 674,033 individuals. The hospital claims there is no evidence of financial fraud or identity theft resulting from this incident. The eposed data includes:

  • Social Security numbers
  • Dates of birth
  • Driver's license details
  • Financial account information
  • Medical diagnoses
  • Health insurance data

It's not clear why RUMC has taken over 1.5 years to report the number of affected individuals.

 

Ransomware attack affects trauma, stroke care at Richmond University Medical Center