Prairie Lakes Healthcare System

Summary

A South Dakota-based healthcare organization experienced a network disruption affecting some computer systems, prompting immediate containment actions and restoration of critical operations to maintain patient care delivery with minimal service impact. The entity engaged cybersecurity experts to investigate the incident, which preliminarily involved a limited number of IT systems, with all affected infrastructure subsequently restored. While no evidence of unauthorized access to protected health information was identified during the ongoing investigation, the organization committed to notifying affected individuals should such exposure be confirmed.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On October 6, 2021, Prairie Lakes Healthcare System, a Watertown, South Dakota-based health organization, experienced unauthorized network activity that disrupted some of its computer systems. The disruption prompted immediate action to secure the network infrastructure and restore critical operational systems, allowing the hospital to maintain continuity of care delivery. Upon detecting the breach, the organization initiated an internal investigation and engaged an external cybersecurity firm to assist with remediation efforts and to assess the scope of the compromise. While the investigation remained ongoing as of November 3, preliminary findings indicated the incident affected only a "small number" of IT systems within the network. Technical teams prioritized restoring functionality to impacted systems, successfully bringing all affected infrastructure back online following the disruption. Throughout the incident, clinical operations continued with minimal reported impact on patient care delivery, as staff implemented contingency measures to sustain essential services.

The health system publicly disclosed the incident via a November 3 news release, confirming no evidence had been found indicating unauthorized access to protected health information (PHI) or patient data during the network breach. Despite this finding, the organization committed to notifying affected individuals should subsequent investigation reveal any compromise of sensitive information. Restoration efforts concluded with all disrupted IT systems fully operational, though the cybersecurity firm's forensic analysis continued to examine the attack's origin and methodology. Prairie Lakes emphasized its immediate containment actions upon breach discovery and the implementation of remediation protocols to reinforce system security. No further details regarding the attack vector, threat actor identity, or specific affected systems were disclosed in the initial public statement.

Sources

Sources available to members: 1 source.