LOUISVILLE, Ky. — Four Louisville healthcare centers are infected with ransomware, according to Park DuValle Community Health Center CEO Ann Hagan-Grigsby. This is the second attack so far this year. The CEO said they contacted the FBI shortly after learning of the infected servers.
She confirms all four health care sites’ servers have been down since the beginning of June. Staff have had no access to patient information or medical history.
"We can't see anything in our computers. We can't see their names, addresses. It’s all encrypted," Hagan-Grigsby said.
Staff continue to serve clients without the use of computer systems, relying solely on paper records. They have not been able to process any payments since June 7.
Grigsby said, "It’s not as fast as being able to go to a computer system and pull up information."
Hagan-Grigsby confirmed the non-profit has paid the cybercriminal with Bitcoin, a cryptocurrency. She could not confirm the exact amount, as Bitcoin currency fluctuates conversion rates. They paid six Bitcoins to regain access to the files, which would equal about $60,000.
IT staff are currently working to decrypt all medical records but the process could take weeks or even months, Hagan-Grigsby said.
The CEO said no patient information was compromised during the cyber-attack.
The Park DuValle Community Health Center provides preventive health services, primary adult and pediatric medical care, women’s health, family planning, primary dental care including dental hygiene, behavioral health services, social services, nutrition counseling, immunizations, pharmacy, X-ray, laboratory, Women, Infants and Children’s Program (WIC) and transportation services.
The centers serve primarily Medicare and Medicaid patients.
The clinics affected are:
3015 Wilson Ave. Louisville, KY 40211
Russell Neighborhood Health Center
1425 W. Broadway 40203
2237 Hikes Ln. Louisville, KY 40218
Taylorsville Community Health Center
501 Taylorsville Rd. Taylorsville, KY 40071