The computer network of Goodman Campbell Brain and Spine, a large independent Carmel-based surgical group, was hacked, compromising patient and employee data.
The cyberattack took place on May 20, the company said in a press release on Friday. On Monday, 13 days after the attack, the company’s phone system was still unresponsive.
“Currently all of our systems are down, including our phone system,” read a recorded greeting on the company’s main phone number.
The phone system has since changed its recorded greeting and is now accepting calls.
A spokesperson for Goodman Campbell said on Tuesday the company had engaged a forensic analysis and incident response firm. He has also asked the FBI’s Cybercrimes Division to help with the case and is actively working with FBI ransomware experts.
The company did not say whether the hackers demanded a ransom, as hackers did at several other health facilities, including last year at Eskenazi Health.
Hackers have also broken into the Johnson Memorial and Hancock Memorial computer systems over the past two years.
Goodman Campbell did not specify how much or specifically what type of data could have been compromised.
“While we have not yet been able to verify the complete nature and extent of personal data that may have been compromised, initial analysis indicates that Goodman Campbell patient and employee data was accessed by an unauthorized party,” the group said in a statement Friday. Press release.
The surgical group said in its announcement that it “took immediate action to protect” its affected systems, eradicate any malicious activity and begin restoring its systems.
“The security of our patients’ and employees’ data is of the utmost importance, and we deeply regret that this attack on our systems has occurred,” the statement said. “When this investigation into the cyber attack is complete, we will contact affected patients and staff by US Mail.”
Goodman Campbell did not immediately respond to questions from IBJ, which were forwarded through an outside public relations firm that represents the company.
Last year, ransomware attacks against healthcare organizations increased by 94%, according to the 2022 State of Ransomware Report from cybersecurity firm Sophos. The report is based on a global survey of 5,600 IT professionals and included interviews with 381 health IT professionals from 31 countries, according to HIPAA Journal, a news organization that reports on people’s privacy. patients.
Goodman Campbell, based at 13345 Illinois St. in Carmel, was founded in 2010 by the merger of the Indianapolis Neurosurgery Group and the Indiana University Neurological Surgery Department.
Its surgeons treat a wide range of difficult medical conditions on the brain and spine, including aneurysms, concussions, pituitary disorders, intervertebral discs, tumors, injuries, and degenerative diseases.