A healthcare provider in Vermont suffered a cyberattackthat delayed the rollout of an electronic health record (EHR) system. Notably, the attack cost the provider millions of dollars in lost revenue. The University of Vermont (UVM) Health Network, based in Burlington, was hit by a ransomware attack in October 2020 and has yet to fully recover. Most systems have been restored. However, some applications are still down, causing delays in various departments, including radiology.
The network serves much of Vermont and parts of New York City. When hackers hit six of the hospitals , Vermont Gov. Phil Scott deemed the situation serious enough to warrant deploying the Vermont Army National Guard's Combined Cyber Response Team 1to help with the recovery effort.
In December, UVM Health Network CEO Dr. Stephen Leffler said the cyberattack cost the health network about $1.5 million a day in lost revenue and remediation costs.
As Infosecurity Magazine reports, UVM Health Network completed the first phase of its Epic EHR implementation in November 2019, adding additional clinical and administrative capabilities for inpatient and outpatient settings that included clinical care, billing, enrollment, and scheduling. Phases two and three were scheduled to be implemented in March and November 2021, respectively. However, the effects of the ransomware attack combined with the impact of the COVID-19 have pushed back plans, so phases two and three will be implemented in November 2021 and April 2022, pending approval by the Green Mountain Care Board.
John Brumsted, MD (Doctor of Medicine), President and CEO of UVM Health Network, said in a statement: “In 2020, our network, like the entire world, faced tremendous challenges due to the COVID-19 pandemic, while being further burdened by a ransomware attack. An electronic record is one of the most important things we can do to ensure high-quality care and create a seamless experience for patients . That’s why it’s absolutely critical for our patients, our people, and our communities that we get this system implemented right. Given the obstacles we’ve faced over the past year, amending the timeline for EHR deployment is the right thing to do.”
