KETTERING, Ohio — A "cybersecurity incident" has resulted in a system-wide technology outage and an increase in reported scam calls, Kettering Health announced Tuesday.
The health network said unauthorized access to its network resulted in an outage impacting the call center and access to patient care systems. The outage forced the cancellation and rescheduling of elective inpatient and outpatient procedures, but Kettering said all emergency rooms and clinics remain open.
Kettering said it has confirmed reports of scam calls since the outage that claim to be members of the network's team requesting credit card payments for medical expenses. The health network said that it is customary for employees to contact patients to discuss payment options, but all calls have been canceled until further notice due to the scam.
"We encourage anyone who receives a scam call to report it to local law enforcement," Kettering said.
CNN reports ransomware was deployed on Kettering's computer systems. The note, viewed by CNN, threatens to leak data stolen from Kettering online unless the health network negotiates an extortion fee.
WATCH: Cybersecurity expert breaks down attack on Kettering Health
Richard Harknett, director of the Cyber Strategy and Policy Center at the University of Cincinnati, reviewed Kettering Health's cybersecurity incident.
"It’s a pretty comprehensive attack, and that has all the markings of an organized criminal gang," said Harknett.
Harknett said the number of cybergangs that specialize in ransomware attacks has nearly doubled in the last two years.
WCPO 9 reached out to Kettering Health Media Relations to ask if they could confirm this was a ransomware attack.
They did not answer that question and shared their first statement published on their website, referring to "a system-wide technology outage."
Harknett said hospitals have a target on their back for ransomware attacks.
"They have a lot of valuable data, a lot of personal data. But they also have urgency," said Harknett.
Because hospitals are dealing with patient lives and sometimes life-or-death situations, Harknett said the pressure to pay and get information and technology back is higher.
We saw multiple comments on Facebook from Kettering Health patients worried about the risk to their personal information. Harknett said if this is a ransomware attack, leaks could be possible.
In an online statement, Kettering Health said they "have taken steps to contain and mitigate this activity and are actively investigating and monitoring the situation."
We asked Harknett if there is anything else besides possible leaks that patients need to be worried about.
"If some of this data leaks, then there will be other kinds of criminal actors who then try to scam down the road," Harknett said.
Harknett recommends paying close attention to your credit cards that are on file with Kettering Health.
