Roosevelt General Hospital

Summary

Roosevelt General Hospital experienced a malware attack affecting a digital imaging server containing patient information, discovered during a period of heightened cyberattacks targeting healthcare providers before holidays. The incident compromised sensitive data and disrupted operations, reflecting a broader trend impacting multiple U.S. healthcare organizations. Such attacks pose risks of data breaches and operational interruptions within the sector.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Roosevelt General Hospital (RGH) disclosed the discovery of malware on one of its digital imaging servers on November 14, 2019. The compromised server contained patient information, though the hospital did not specify the exact nature or volume of data exposed. This incident occurred amid a broader surge of cyberattacks targeting U.S. healthcare providers in the weeks preceding the Christmas holiday season. RGH's disclosure aligned with reports of increased malicious activity during periods when organizations might have reduced staffing or vigilance. The malware’s presence on a specialized imaging system suggested potential operational disruptions to diagnostic services, though the hospital did not publicly detail clinical impacts or downtime duration. No ransomware claims or explicit extortion attempts were mentioned in available reports regarding RGH’s case.

The attack formed part of a documented pattern of late-2019 healthcare breaches, with multiple providers reporting incidents throughout December. San Antonio’s Center for Health Care Services (CHCS) concurrently experienced a large-scale cyberattack forcing system-wide shutdowns across its clinics. At least five other healthcare entities—including Colorado Department of Human Services, Sinai Health System, Cheyenne Regional Medical Center, Children’s Hope Alliance, and RiverKids Pediatric Home Health—disclosed breaches during the same month. Industry analysts highlighted the heightened risk of data theft, ransomware propagation, and life-endangering service interruptions stemming from such attacks. RGH’s incident underscored vulnerabilities in specialized medical systems handling sensitive patient data, though the hospital did not release technical specifics about the malware’s entry vector or containment measures beyond the initial detection date.

Sources

Sources available to members: 1 source.