The Erie County Medical Center, a 550-bed hospital in Buffalo, N.Y., has been hit by a computer virus and in response has shut down the facility’s email, electronic health record system and website as a precautionary measure. ECMC’s Terrace View long-term care facility has also been affected.

A virus was detected early Sunday morning at ECMC, which is the primary teaching hospital for the University at Buffalo, according to Peter Cutler, vice president of communications and external affairs.

In accordance with organizational protocols, Cutler says that the hospital’s IT team “shut our system down” and that as of Tuesday afternoon, he said it remained out of commission.

“The electronic health record system is not running but it has not been affected as far as we can tell,” he adds. Based on an assessment of its EHR, Cutler contends that “at this stage we’ve not detected that there’s been any compromise of patient health information.” At the same time, he noted that all medical records are backed up and as a result are protected from being lost. For the time being, Cutler says ECMC staff is using paper records.

Erie County Medical Center

Also See: Health center finds virus on computer with patient info

“We’re absolutely operational. It creates some challenges, of course. People are working longer shifts,” he observes. “It has not had an impact on our ability to function.”

Cutler says the hospital is hoping to restore systems as soon as possible, although he could not estimate how long it would take to restore all functionality. “We’re in response and recovery mode. It’s an around-the-clock operation right now.”

According to Cutler, the FBI and New York State Police have been called in to investigate the incident. When asked if ECMC had been hit with ransomware, he would not comment other than to say “what we know is that there was something that came into the system.”

As part of the ongoing investigation, the hospital is working with consultant GreyCastle Security in addition to federal and state law enforcement agencies to “determine the origin of this thing,” Cutler concludes.

Register or login for access to this item and much more

All Health Data Management content is archived after seven days.

Community members receive:
  • All recent and archived articles
  • Conference offers and updates
  • A full menu of enewsletter options
  • Web seminars, white papers, ebooks

Don't have an account? Register for Free Unlimited Access