Skip to main content
Sister Publication Links
  • ESG: THE NEW IMPERATIVE
Subscribe
  • My Account
  • Login
  • Subscribe
  • News
    • Current News
    • COVID-19
    • Providers
    • Insurance
    • Government
    • Finance
    • Technology
    • Safety & Quality
    • Transformation
    • People
    • Regional News
    • Digital Edition (Web Version)
    • Patients
    • Operations
    • Care Delivery
    • Payment
    • Midwest
    • Northeast
    • South
    • West
  • Digital Health
  • Insights
    • ACA 10 Years After
    • Best Practices
    • Special Reports
    • Innovations
  • Data/Lists
    • Rankings/Lists
    • Interactive Databases
    • Data Points
  • Opinion
    • Bold Moves
    • Breaking Bias
    • Commentaries
    • Letters
    • Vital Signs Blog
    • From the Editor
  • Events & Awards
    • Awards
    • Conferences
    • Galas
    • Virtual Briefings
    • Custom Media Event: ESG Summit
    • Webinars
    • Nominate/Eligibility
    • 100 Most Influential People
    • 50 Most Influential Clinical Executives
    • Best Places to Work in Healthcare
    • Excellence in Governance
    • Health Care Hall of Fame
    • Healthcare Marketing Impact Awards
    • Top 25 Emerging Leaders
    • Top 25 Innovators
    • Diversity in Healthcare
      • - Luminaries
      • - Top 25 Diversity Leaders
      • - Leaders to Watch
    • Women in Healthcare
      • - Luminaries
      • - Top 25 Women Leaders
      • - Women to Watch
    • Leadership Symposium
    • Social Determinants of Health Symposium
    • Transformation Summit
    • Women Leaders in Healthcare Conference
    • Best Places to Work Awards Gala
    • Health Care Hall of Fame Gala
    • Top 25 Diversity Leaders Gala
    • Top 25 Women Leaders Gala
    • - Hospital of the Future
    • - Value Based Care
    • - Supply Chain Revenue Cycle
    • - Hospital at Home
    • - Workplace of the Future
    • - Virtual Health
    • - Future of Healthcare Staffing
  • Multimedia
    • Podcast - Beyond the Byline
    • Sponsored Podcast - Healthcare Insider
    • Video Series - The Check Up
    • Sponsored Video Series - One on One
  • MORE +
    • Advertise
    • Media Kit
    • Newsletters
    • Jobs
    • People on the Move
    • Reprints & Licensing
MENU
Breadcrumb
  1. Home
  2. Technology
October 21, 2016 01:00 AM

Athenahealth, Allscripts websites down amid nationwide hack

Shelby Livingston
  • Tweet
  • Share
  • Share
  • Email
  • More
    Reprints Print

    The websites of EHR software providers Athenahealth and Allscripts were down for some parts of the country Friday during the same time hackers launched an attack against the servers of Dyn, a major Domain Name System host.

    Twitter, Spotify, Reddit, and Shopify were down most of Friday morning and afternoon, but healthcare companies seemed to be largely unaffected.

    Dyn posted on its website Friday that it experienced an attack early that morning but restored services a few hours later. A second attack occurred around 11 a.m. Central time. Dyn is still investigating and mitigating the attacks, it said.

    A spokeswoman for web-based EHR provider Athenahealth said that while its customer-facing retail site was down, none of its EHR software clients have reported problems.

    “DYN has many large customers across the U.S. who were affected, including Amazon, Twitter, Spotify and many others,” said Victoria Gavaza, Athenahealth spokeswoman, adding the issue was not related to Athenahealth servers or back-up servers. Athenahealth also said its data is “maintained intact and secure” and “backed up constantly” when there's an issue with the internet.

    Robert Tennant, director of health information policy for the Medical Group Management Association, a trade association for managers of physician office-based practices, said the organization hasn't heard of any members dealing with issues related to the internet outage. But he said Friday's cyberattack against Dyn is a reminder to healthcare practices that they need to prepare for instances when medical data isn't available.

    Before internet outages even occur, practices should understand how medical files will be affected. Will files be accessible by clinicians? Will data entered manually be backed up, or could it potentially be lost?

    “It reminds practices that they need to be diligent, for example, in having somebody or some technician or firm that they can call in and assist them as part of their disaster recovery plan required under HIPAA,” Tennant said. “Our members for the most part are not technical experts, so they want to get their vendors to explain and provide assurances that there will not be any negative impact” when an internet outage occurs.

    Friday's malware hack is called Mirai, according Michael “Mac” McMillan, the CEO and co-founder of CynergisTek, an Austin, Texas-based security firm.

    That's the same malignant code that was used last month to paralyze the popular KrebsonSecurity.com blog in what's called a Distributed Denial of Service attack.

    The malware first scours the so-called Internet of Things, which is made up of millions of computerized and internet-connected devices that range from coffee pots to security cameras to door locks.

    “Most have very little to no security on them,” McMillan said. So it's easy for the malware to penetrate these small computers and recruit them into an army of digital storm troopers called a botnet.

    Then, the hacker leader “turns them into an attack platform,” McMillan said. “They begin to send traffic at whatever the target address is and overwhelms and crashes it, and anyone that's connected to it loses their connectivity.”

    According to a cybersecurity arm of the Homeland Security Department, the Mirai author claimed “over 380,000 IoT devices were enslaved by the Mirai malware in the attack on Krebs's website.” A Mirai legion of devices is capable of pummeling a target site with as much as 1.1 terabits of data per second.

    McMillan said “only a few” of his customers, all small hospitals with downed web-based EHRs from Athenahealth, contacted him. But even for those hospitals with so-called “legacy” EHRs that run on the hospital's own computers, an average of about 30% of their information technology infrastructure is hosted by an outside company and provided over the internet.

    “Right now,” McMillan said, “there is very little defense.” So, the key is preparedness for these sorts of attacks, just as organizations must do for downtime due to more conventional means, such as power outages and hardware malfunctions, he said.

    Modern Healthcare reporter Joseph Conn contributed to this report.

    Letter
    to the
    Editor

    Send us a letter

    Have an opinion about this story? Click here to submit a Letter to the Editor, and we may publish it in print.

    Recommended for You
    Amwell logo_edited_i.jpg
    Amwell tapped for CVS Health's virtual care platform
    Myra Davis
    Q&A with Myra Davis of Texas Children's Hospital: ‘Innovation is everyone’s responsibility’
    Sponsored Content
    Health IT Strategist (HITS) Newsletter: Sign up for the latest IT and medical technology news delivered 3 days a week (M, W, F).
     
    Get Newsletters

    Sign up for enewsletters and alerts to receive breaking news and in-depth coverage of healthcare events and trends, as they happen, right to your inbox.

    Subscribe Today
    MH Magazine Cover

    MH magazine offers content that sheds light on healthcare leaders’ complex choices and touch points—from strategy, governance, leadership development and finance to operations, clinical care, and marketing.

    Subscribe
    Connect with Us
    • LinkedIn
    • Twitter
    • Facebook
    • RSS

    Our Mission

    Modern Healthcare empowers industry leaders to succeed by providing unbiased reporting of the news, insights, analysis and data.

    Contact Us

    (877) 812-1581

    Email us

     

    Resources
    • Contact Us
    • Advertise with Us
    • Ad Choices Ad Choices
    • Sitemap
    Editorial Dept
    • Submission Guidelines
    • Code of Ethics
    • Awards
    • About Us
    Legal
    • Terms and Conditions
    • Privacy Policy
    • Privacy Request
    Modern Healthcare
    Copyright © 1996-2022. Crain Communications, Inc. All Rights Reserved.
    • News
      • Current News
      • COVID-19
      • Providers
      • Insurance
      • Government
      • Finance
      • Technology
      • Safety & Quality
      • Transformation
        • Patients
        • Operations
        • Care Delivery
        • Payment
      • People
      • Regional News
        • Midwest
        • Northeast
        • South
        • West
      • Digital Edition (Web Version)
    • Digital Health
    • Insights
      • ACA 10 Years After
      • Best Practices
      • Special Reports
      • Innovations
    • Data/Lists
      • Rankings/Lists
      • Interactive Databases
      • Data Points
    • Opinion
      • Bold Moves
      • Breaking Bias
      • Commentaries
      • Letters
      • Vital Signs Blog
      • From the Editor
    • Events & Awards
      • Awards
        • Nominate/Eligibility
        • 100 Most Influential People
        • 50 Most Influential Clinical Executives
        • Best Places to Work in Healthcare
        • Excellence in Governance
        • Health Care Hall of Fame
        • Healthcare Marketing Impact Awards
        • Top 25 Emerging Leaders
        • Top 25 Innovators
        • Diversity in Healthcare
          • - Luminaries
          • - Top 25 Diversity Leaders
          • - Leaders to Watch
        • Women in Healthcare
          • - Luminaries
          • - Top 25 Women Leaders
          • - Women to Watch
      • Conferences
        • Leadership Symposium
        • Social Determinants of Health Symposium
        • Transformation Summit
        • Women Leaders in Healthcare Conference
      • Galas
        • Best Places to Work Awards Gala
        • Health Care Hall of Fame Gala
        • Top 25 Diversity Leaders Gala
        • Top 25 Women Leaders Gala
      • Virtual Briefings
        • - Hospital of the Future
        • - Value Based Care
        • - Supply Chain Revenue Cycle
        • - Hospital at Home
        • - Workplace of the Future
        • - Virtual Health
        • - Future of Healthcare Staffing
      • Custom Media Event: ESG Summit
      • Webinars
    • Multimedia
      • Podcast - Beyond the Byline
      • Sponsored Podcast - Healthcare Insider
      • Video Series - The Check Up
      • Sponsored Video Series - One on One
    • MORE +
      • Advertise
      • Media Kit
      • Newsletters
      • Jobs
      • People on the Move
      • Reprints & Licensing