Scripps Health Ransomware Attack Costs Expected to Exceed $113M.

June 1, 2022

INCIDENT

In the May 2021 ransomware attack, Scripps Health lost access to information systems at two of its hospitals, staff couldn’t access the electronic medical record system, and its offsite backup servers were also affected. Without access to critical IT systems, Scripps Health was forced to re-route stroke and heart attack patients and trauma patients could not be accepted at its main hospitals. The company stated it took 4 weeks to recover from the attack.

Losses sustained as a result of the attack are expected to exceed $113 million. The costs are likely to increase further still. The protected health information of 147,267 patients was compromised in the attack, and several class action lawsuits have been filed against Scripps Health over the theft of patient data. The expected losses do not include litigation costs.

Incident Date

May 15, 2021

Location

United States

Estimated Cost

Cost $113M - not counting litigation costs

Type of Malware

Threat Source

No threat source identified