Cyberattack Disrupts Scripps Health Operations Across San Diego Scripps Health, a major healthcare provider in San Diego, California, suffered a significant cyberattack on May 1, 2021, forcing the organization to take critical IT systems offline. The attack disrupted electronic health records (EHR), patient portals, and other digital services, leading to delays in care and the diversion of emergency patients to alternative facilities. The incident, later confirmed as a ransomware attack, targeted Scripps’ network infrastructure, encrypting data and demanding payment for decryption. While the exact strain of ransomware remains undisclosed, cybersecurity experts suspect involvement from a known criminal group. Scripps responded by activating emergency protocols, including manual record-keeping and coordination with law enforcement, including the FBI. The attack’s impact extended beyond IT disruptions, with outpatient appointments canceled or rescheduled and some elective procedures postponed. Scripps’ four hospitals and 24 outpatient facilities across San Diego County were affected, though emergency services remained operational. The organization restored systems gradually over several weeks, with full recovery taking nearly a month. Investigations revealed that the attackers may have exploited vulnerabilities in third-party software or phishing tactics to gain access. Scripps later confirmed that patient data, including medical records and personal information, was compromised, though the extent of the breach remains under review. The incident underscores the growing threat of ransomware against healthcare providers, particularly during the COVID-19 pandemic, when reliance on digital systems was at an all-time high. As of the latest updates, no ransom payment was publicly confirmed, and Scripps has since implemented enhanced security measures to prevent future attacks. The case remains under federal investigation.

Scripps Healthcare faced a significant cyberattack involving the Conti malware, an evolution of the Trickbot malware. Attackers, part of a Russian-based hacking group, managed to compromise the healthcare network's systems, leading to extensive damage. Over 900 computers were affected, resulting in delayed patient care and information retrieval. Additionally, the personal data of approximately 150,000 patients was stolen. This cyberattack not only disrupted critical healthcare operations but also threatened the privacy and security of thousands of individuals, underscoring the growing severity of ransomware attacks in the sector.

Scripps Health's system was forced to transition to offline chart systems and experienced an interruption to its patient portals. The healthcare system said attackers suspended access to their patient portals and other technology applications related to their operations at the healthcare facilities. Some appointments were canceled as a result of the breach.

The California Office of the Attorney General reported that Scripps Health experienced a data breach resulting from unauthorized access to their network on April 29, 2021, affecting patient information. The breach was identified on May 1, 2021, and reported on June 1, 2021. The specific number of individuals affected is unknown.