Anatomy of a Cyberattack: Part 3: Coordination in Crisis, Development of an incident Command Team, and Resident Education During Downtime

Objectives: Our institution was subject to a multi-institutional, systemwide cyberattack that led to a complete shutdown of multiple major patient care, operational, and communication systems for more than 25 days. The electronic health record computer system was taken offline, as was the hospital e...

Full description

Saved in:
Bibliographic Details
Published in:American journal of clinical pathology 2022-06, Vol.157 (6), p.814-822
Main Authors: Stowman, Anne M, Cacciatore, Lori S, Cortright, Valerie, McConnell, John, Wilburn, Clayton, Bryant, Bronwyn, Frisch, Nora, Kalof, Alexandra N
Format: Article
Language:English
Subjects:
Communication
Communications systems
Computer software industry
Computers
Crisis management
Cyberterrorism
Data encryption chips
Disaster relief
Electronic medical records
Laboratories
Medical records
Middleware
Patients
Strategic planning (Business)
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Objectives: Our institution was subject to a multi-institutional, systemwide cyberattack that led to a complete shutdown of multiple major patient care, operational, and communication systems for more than 25 days. The electronic health record computer system was taken offline, as was the hospital email and authentication systems, internet access, and the laboratory information system. The impact on the hospital and patient care was substantial, and our laboratories were crippled. Methods: Our laboratory endured challenges in communication because of the loss of connectivity and difficulties in laboratory management, and we recognized a need to restructure leadership to maintain operations during the crisis. As an academic institution, residents and trainees were also significantly affected by the disaster. Results: We developed an incident command team (ICT), alternative methods of communication, and innovative management strategies to remain operational. Trainees were incorporated into the disaster-relief efforts, with negative impacts on resident education. Conclusions: This paper focuses on the challenges in communication and lab management as well as the need for an alternative leadership structure during the crisis. We also highlight the unique experience of our trainees during this prolonged downtime, underscoring the importance of incorporating resident trainees into the daily ICT's administrative activities as an invaluable lab management experience. KEY WORDS Lab management; Cyberattack; Coordination; Incident command; Downtime; Resident education; Ransomware; Malware
ISSN:0002-9173
1943-7722
DOI:10.1093/AJCP/AQAB162