Hospital system in Michigan hit by cyberattack for second time in a year

A 13-hospital health system in Michigan confirmed Wednesday it was hit by a cyberattack that caused it to cancel some non-emergency care services “out of an abundance of caution.” 

In a notice, McLaren Health Care said emergency care services and most surgeries will continue as normal. However, the cyberattack disrupted IT and phone systems, leading to its discovery. 

McLaren also operates ambulatory care centers, imaging facilities and physician clinics—and it provides health plan coverage to patients in Michigan and Indiana. All patients seeking services at McLaren are asked to bring any medical records they have with them to appointments, including prescription data and lab tests, in case electronic patient care operations are disrupted. 

“Several information technology systems continue to operate in downtime procedures while we work to fully restore functionality to our system. We have policies and procedures in place and train for information technology disruptions. We are grateful for the response from our frontline caregivers and staff who have come together to provide care under these circumstances,” McLaren said in its statement. 

The health system said it is working with a cybersecurity firm to analyze the extent of the attack. Currently, it does not know if any patient data was taken. 

Less than a year ago, McLaren was hit by a ransomware attack, which led to patient records being posted for sale on the dark web. 

Chad Van Alstin Health Imaging Health Exec

Chad is an award-winning writer and editor with over 15 years of experience working in media. He has a decade-long professional background in healthcare, working as a writer and in public relations.

Around the web

The final list also included diabetes drugs sold by Boehringer Ingelheim and Merck. The first round of drug price negotiations reduced the Medicare prices for 10 popular drugs by up to 79%. 

HHS has thought through the ways AI can and should become an integral part of healthcare, human services and public health. Last Friday—possibly just days ahead of seating a new secretary—the agency released a detailed plan for getting there from here.

Philips is recalling the software associated with its Mobile Cardiac Outpatient Telemetry devices after certain high-risk ECG events were never routed to trained cardiology technicians as intended. The issue, which lasted for two years, has been linked to more than 100 injuries.