Hackers Hold Medical Records Hostage

RICHMOND, Va.–One press report calls it the sign of a new
digital age, and another says it’s the next cable movie:
Hackers claim to have stolen 8.3 million confidential health
records from a Virginia state government site and are holding them
for a $10 million ransom.
 
In a note posted on Wikileaks, a Web site for anonymous tips about
government information leaks, the hackers said they had the records
from health care workers, along with records of 35 million
prescriptions.
 
The note gave the state seven days to respond before the records
are sold on the Internet to the highest bidder.
 
A statement from Virginia’s Department of Health Professions, which
monitors drug use for health care professionals, confirmed an
intrusion on April 30. The department’s computer system has
been shut down since, and the FBI is on the case.
 
“A criminal investigation is currently underway regarding a
potential security breach of the Virginia Department of Health
Profession’s (DHP) Prescription Monitoring Program on
Thursday, April 30,” said DHP Director Sandra Whitley Ryals.
“While DHP cannot comment directly on an ongoing
investigation, we can assure the public that all precautions are
being taken for DHP operations to continue safely and
securely.
 
“Since last week, when DHP recognized an unauthorized message
was posted on the Prescription Monitoring Program Web site, we have
been working very closely and cooperatively with federal and state
law enforcement to resolve the situation. The entire DHP system has
been shut down since Thursday to protect the security of the
program data, and state authorities including the Virginia
Information Technologies Agency and the Virginia State Police were
notified immediately upon identifying the potential breach. We are
satisfied that all data was properly backed up and that these
backup files have been secured.”
 
As part of his health reform effort, President Obama has said he
will push for a national switch to computerized medical records
within five years.