OKLAHOMA CITY, OK – A significant cyberattack utilizing ransomware has impacted Ardent Health Services, leading to patient diversions at multiple emergency rooms in at least three states. The healthcare provider, which operates 30 hospitals across the country, has been dealing with the fallout of the attack since Thanksgiving Day.

The malicious incident prompted an emergency response from Ardent, with some facilities rescheduling elective, non-emergent procedures and rerouting ER patients to other local hospitals. The cybersecurity breach affected essential systems used for clinical programs and patient health care records managed through Epic Systems.

The ransomware attack, a type of digital extortion where perpetrators encrypt files and demand payment, has disrupted normal operations across Ardent’s affiliated hospitals. Affected locations include Hillcrest HealthCare System in Oklahoma, Lovelace Health System in New Mexico, and UT Health in Texas. These healthcare providers have confirmed that their emergency departments have had to divert some patients to alternate medical facilities.

In response to the incident, Ardent Health Services has disabled a substantial portion of its IT infrastructure in a bid to contain the attack and prevent further damage. This precautionary step has significantly reduced access to digital resources used daily in patient care.

Ransomware attacks often target medical institutions, capitalizing on the critical role of IT systems in patient care. Such attacks have increased since 2019, and while the FBI discourages payment to avoid encouraging further criminal activity, it places hospitals in a challenging position to maintain patient services.

Cybersecurity experts note that the frequency of these attacks poses a serious risk to patient safety. Brett Callow from Emsisoft highlighted that 2022 has seen upwards of 35 ransomware attacks on U.S. healthcare facilities, with Ardent’s case being among the most significant. Studies suggest a correlation between these cyber incidents and increased patient mortality rates, although no direct causality has been proven.