Last Thursday, January 18, 2018, Allscripts Healthcare Solutions was hit by a ransomware attack that has left several of their applications offline. Their Raleigh and Charlotte, NC data centers were reportedly infected by a strain of the notorious SamSam ransomware that has infected other healthcare institutions. Due to the attack, Allscripts’ PRO EHR and Electronic Prescriptions for Controlled Substances (EPCS) platforms were brought down.
The EPCS has since been restored, but Allscripts says they are still attempting to restore the EHR services. This has left numerous healthcare providers complaining of continued disruption, and some claim that their institutions have had to revert to using paper records.
In a statement issued to Healthcare Analytics News, Allscripts said that of their 180,000 physicians, 100,000 electronic prescribing physicians, and 40,000 in-home clinicians, roughly 1500 of its clients were impacted. They also stated that none of their affected clients, “were hospitals or large independent physician practices.”
With no updates available on Allscripts website or social networks, a lot of practices have taken to social media to express their frustrations. Twitter has been flooded with tweets asking for updates, as impacted customers scramble for answers and some practices across the country have been without access to their patients' charts or vital information for 6 days.
The attack has brought to light major concerns for providers that have transitioned to using cloud-based IT services from vendors. The event underscores a great potential for vulnerability to cyberattack and service outages with these systems. The Allscripts attack reveals a need for providers to be actively aware of the contractual provisions and security protections when they are looking into purchasing electronic health records (EHRs).
Articles You Might Find Interesting:
Texting in Your Healthcare Facility
Net Neutrality and The Cloud
You December 2017 Cyber Security Recap - Video
Update Your Cyber Security Measures in 2018