Cyberattack on Lurie Children’s Hospital a Stark Reminder About Security Needs

February 20, 2024

Chicago’s largest children’s hospital is the victim of a cybersecurity attack by a known, but unnamed, criminal threat actor. As posted on Lurie’s website, the hospital administration is actively responding to this cybersecurity matter. As we publish ISMIE News, some email and telephone operations have been restored. They are working closely with cybersecurity experts and law enforcement, including the FBI, to regain full access in this ongoing investigation.

This criminal attack is an unfortunate reminder that these types of incidents can happen anywhere at any time. ISMIE offers a comprehensive resource on cybersecurity that contains valuable information to help policyholders develop and implement policies and procedures to protect against attacks. Key strategies include making sure you have current encrypted backups of all critical data stored offline or in separated networks and having a well-rehearsed crisis response plan in case your systems (including email and internet-based phone systems) are compromised.

Other ISMIE resources available to policyholders include EMR downtime for guidance and risk considerations in the event your system goes down and Emergency preparedness planning covering what to consider before catastrophic events occur.

As of January 1, ISMIE added new enhancements to its already robust cyber liability coverage at no additional cost for Illinois policyholders. In addition to the included limits, policyholders can increase their cyber liability protection with higher limits if desired. ISMIE Mutual offers flexible pricing options for individual physicians and groups.

ISMIE encourages policyholders to review cybersecurity protections and emergency preparedness plans. If you experience a cybersecurity attack or suspect your organization’s cybersecurity has been breached, contact the Claims Division as soon as possible by email or by calling 800-782-4767, extension 3510.