The Arkansas Oral and Facial Surgery Center in Harrison is investigating a ransomware attack on July 26, 2017, that affected patient information and imaging files.
Here are six insights:
1. An investigation revealed the ransomware had been installed on the surgery center's systems by an unauthorized individual at some time that morning or the prior evening.
2. Arkansas Oral and Facial Surgery Center believes the motivation behind the incident was extortion and not patient information theft.
3. While a limited number of patient information was affected, imaging files such as x-rays and documents were impacted. The surgery center's information database was not harmed.
4. No patient information has been stolen due to the attack; however, the ransomware rendered imaging files and documents inaccessible. It also appears the ransomware rendered all electronic patient data relating to patient visits within three weeks of the attack inaccessible.
5. Information in documents affected included patient names, addresses, date of birth and social security numbers, as well as medical history information.
6. Following the incident, the Arkansas Oral and Facial Surgery Center implemented a new record system. The surgery center is also arranging for credit monitoring protection to patients for up to 12 months at no cost.