Major American Medical Facility, LabCorp, Riddled with Ransomware

LabCorp Suffers From Cyber Attack

A suspected ransomware attack hit America’s medical lab facility, LabCorp, the weekend of July 14, 2018.  Suspicious activity was detected on the company’s diagnostic systems.  The ransomware variant has been disclosed as SamSam.  This is the same variant that took down the City of Atlanta and Colorado’s Department of Transportation.  At this time, LabCorp officials have not disclosed what the ransom demands were.  However, after investigating the cyber attack, LabCorp officials are confident internal data was not copied by the hackers.  Therefore, they do not believe any employee or patient data was leaked.

Once the suspicious activity was found, LabCorp immediately took certain systems offline as a means to contain the activity.  At the peak of the attack, patients were not able to access their lab results, nor was testing able to be completed.  According to the company’s SEC filings,

“Work has been ongoing to restore full system functionality as quickly as possible, testing operations have substantially resumed [Monday], and we anticipate that additional systems and functions will be restored through the next several days.”

As of July 24th, approximately 90% of their systems were functioning.

Other Ransomware Attacks

For a list of ransomware attacks that have already taken place in 2018, you may click here. We have also created a map, see below, of the ransomware attacks that have taken place in the U.S.

Stop Responding to Threats.
Prevent Them.

Want to get monthly tips & tricks?

Subscribe to our newsletter to get cybersecurity tips & tricks and stay up to date with the constantly evolving world of cybersecurity.

Related Articles