News and Analysis

Missouri’s Cass Regional Medical Center was hit by a ransomware attack on July 9, prompting officials to shut down its EHR system to prevent further damage. Patient care was maintained during the attack, but trauma and stroke victims were diverted to ensure the best care. The hackers gained access to the system through a brute force attack on the remote desktop protocol (RDP), although it is unclear how much ransom was demanded. The hospital has since modified its systems to eliminate the risk, and other healthcare organizations are advised to implement stronger security controls.