[{"innerBlocks":[],"name":"core\/freeform","postId":2562,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"Electronic health records vendor Allscripts was hit by a ransomware attack last week, affecting its cloud-hosted EHR among other systems, with hospitals and physician group practices across the country reporting interruptions in service.

A variety of providers are expressing anger and concern on social media, noting that interruptions in service continued through the weekend and that they have not been able to access patient information in the Allscripts cloud.

When reached for comment, the company did not disclose the number of healthcare organizations affected by the systems outage or specifically which of its cloud-based applications or systems were hit the hardest. The vendor\u2019s marketing materials suggest it provides services to 45,000 physician practices with 180,000 doctors, 2,500 hospitals and 19,000 post-acute care providers.

Allscripts operates data centers in Raleigh and Charlotte, N.C.

In a message emailed to customers on Friday, the company acknowledged that it had been hit by a variant of the SamSam malware. \u201cWe are in the process of cleaning impacted systems and services to ensure they will be operational once we are able to bring the services back online,\u201d said the message. \u201cWork continues to restore both the directly affected services\u2014hosted Pro EHR and hosted EPCS\u2014and the other unaffected services that we proactively shut down to protect clients and client data\u2026There is still no evidence that any client data has been removed from our systems.\u201d

Northwell Health, a 22-hospital delivery system in New York, is one organization that was affected by the Allscripts breach, although a company spokesperson contends the impact on the organization was minimal.

\u201cWhen we learned of the attack, we disconnected from data centers as a precautionary measure,\u201d the spokesperson says. \u201cWe lost e-prescribing for controlled substances, but other systems were secure and never at risk. This really didn\u2019t impact us\u2014we just unplugged from Allscripts to ensure no transfer of data. Our systems remained operational.\u201d

In messages to its 2,300 members via social media, the New York American College of Emergency Physicians noted that it received an update from the state\u2019s Department of Health that \u201ca cyber incident regarding AllScripts has occurred\u201d affecting \u201cthe ability for hospitals, clinics, nursing homes, individual prescribers and pharmacies to transmit and receive prescription electronically.\u201d Prescribers in the states using Allscripts services for placing drug orders were allowed to use \u201cpaper official prescriptions\u201d until services are restored, the group reported.

In a published statement, Allscripts acknowledged the attack has affected clients\u2019 services, but offered few specifics.

\u201cWe are investigating a ransomware incident that has impacted a limited number of our applications,\u201d the Allscripts statement noted. \u201cWe are working diligently to restore these systems, and most importantly, to ensure our clients\u2019 data is protected.\u201d

Further, Allscripts believes that no data had been accessed or deleted in the ransomware attack.

\u201cAlthough our investigation is ongoing, there is currently no evidence that any data has been removed from our systems,\u201d the company noted. \u201cWe regret any inconvenience caused by this temporary outage.\u201d

Conference calls over the weekend by the company indicated that service outages were continuing, and that the outage was expected to continue into Monday.

Posts from providers on Twitter on Sunday noted that they were not able to access patient information from Allscripts.

Yvette Crabtree, MD, an internal medicine physician with Sunflower Medical Group in Mission, Kan., reported in a Twitter post Friday that \u201cthe attack on Allscripts has taken down our e-prescribing, EPCS and some other services.\u201d

Industry reports of outages notwithstanding, Allscripts clients should be aware the company is being more upfront about the attack than many other vendors are, says Allen Briskin, a senior counsel at the Pillsbury, Winthrop Shaw Pittman law firm in Los Angeles.

Also See<\/b>: Providers need to prepare for virulent ransomware in 2018<\/a>

Oftentimes, an organization has a ransomware attack that is never reported, Briskin explains. For example, a hacker will access an information system and find a flaw, contact the organization and explain the flaw and ask for a payment. The payment is made, no one talks, clients never know, and the incident isn\u2019t reported to the HHS Office for Civil Rights.

\u201cThe line between an ethical hacker and a non-ethical hacker is very blurry,\u201d Briskin says. \u201cEither by choice or not, Allscripts is managing this incident publicly and many others don\u2019t do that. This is the world we are living in now\u2014it is inevitable, it will happen.\u201d","saveContent":"Electronic health records vendor Allscripts was hit by a ransomware attack last week, affecting its cloud-hosted EHR among other systems, with hospitals and physician group practices across the country reporting interruptions in service.

A variety of providers are expressing anger and concern on social media, noting that interruptions in service continued through the weekend and that they have not been able to access patient information in the Allscripts cloud.

When reached for comment, the company did not disclose the number of healthcare organizations affected by the systems outage or specifically which of its cloud-based applications or systems were hit the hardest. The vendor\u2019s marketing materials suggest it provides services to 45,000 physician practices with 180,000 doctors, 2,500 hospitals and 19,000 post-acute care providers.

Allscripts operates data centers in Raleigh and Charlotte, N.C.

In a message emailed to customers on Friday, the company acknowledged that it had been hit by a variant of the SamSam malware. \u201cWe are in the process of cleaning impacted systems and services to ensure they will be operational once we are able to bring the services back online,\u201d said the message. \u201cWork continues to restore both the directly affected services\u2014hosted Pro EHR and hosted EPCS\u2014and the other unaffected services that we proactively shut down to protect clients and client data\u2026There is still no evidence that any client data has been removed from our systems.\u201d

Northwell Health, a 22-hospital delivery system in New York, is one organization that was affected by the Allscripts breach, although a company spokesperson contends the impact on the organization was minimal.

\u201cWhen we learned of the attack, we disconnected from data centers as a precautionary measure,\u201d the spokesperson says. \u201cWe lost e-prescribing for controlled substances, but other systems were secure and never at risk. This really didn\u2019t impact us\u2014we just unplugged from Allscripts to ensure no transfer of data. Our systems remained operational.\u201d

In messages to its 2,300 members via social media, the New York American College of Emergency Physicians noted that it received an update from the state\u2019s Department of Health that \u201ca cyber incident regarding AllScripts has occurred\u201d affecting \u201cthe ability for hospitals, clinics, nursing homes, individual prescribers and pharmacies to transmit and receive prescription electronically.\u201d Prescribers in the states using Allscripts services for placing drug orders were allowed to use \u201cpaper official prescriptions\u201d until services are restored, the group reported.

In a published statement, Allscripts acknowledged the attack has affected clients\u2019 services, but offered few specifics.

\u201cWe are investigating a ransomware incident that has impacted a limited number of our applications,\u201d the Allscripts statement noted. \u201cWe are working diligently to restore these systems, and most importantly, to ensure our clients\u2019 data is protected.\u201d

Further, Allscripts believes that no data had been accessed or deleted in the ransomware attack.

\u201cAlthough our investigation is ongoing, there is currently no evidence that any data has been removed from our systems,\u201d the company noted. \u201cWe regret any inconvenience caused by this temporary outage.\u201d

Conference calls over the weekend by the company indicated that service outages were continuing, and that the outage was expected to continue into Monday.

Posts from providers on Twitter on Sunday noted that they were not able to access patient information from Allscripts.

Yvette Crabtree, MD, an internal medicine physician with Sunflower Medical Group in Mission, Kan., reported in a Twitter post Friday that \u201cthe attack on Allscripts has taken down our e-prescribing, EPCS and some other services.\u201d

Industry reports of outages notwithstanding, Allscripts clients should be aware the company is being more upfront about the attack than many other vendors are, says Allen Briskin, a senior counsel at the Pillsbury, Winthrop Shaw Pittman law firm in Los Angeles.

Also See<\/b>: Providers need to prepare for virulent ransomware in 2018<\/a>

Oftentimes, an organization has a ransomware attack that is never reported, Briskin explains. For example, a hacker will access an information system and find a flaw, contact the organization and explain the flaw and ask for a payment. The payment is made, no one talks, clients never know, and the incident isn\u2019t reported to the HHS Office for Civil Rights.

\u201cThe line between an ethical hacker and a non-ethical hacker is very blurry,\u201d Briskin says. \u201cEither by choice or not, Allscripts is managing this incident publicly and many others don\u2019t do that. This is the world we are living in now\u2014it is inevitable, it will happen.\u201d","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Allscripts still working to resolve ransomware attack

More for you