Skip to main page content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Access keys NCBI Homepage MyNCBI Homepage Main Content Main Navigation
. 2024 Jun 25;331(24):2129-2131.
doi: 10.1001/jama.2024.7752.

Ransomware Attacks, ED Visits and Inpatient Admissions in Targeted and Nearby Hospitals

Rahi Abouk  1 , David Powell  2
Affiliations

Ransomware Attacks, ED Visits and Inpatient Admissions in Targeted and Nearby Hospitals

Rahi Abouk et al. JAMA. .
No abstract available

Plain language summary

This case-control study analyzes disruptive ransomware attacks against hospitals in California from 2014 to 2020 and emergency department (ED) and inpatient admissions in attacked and nearby hospitals.

PubMed Disclaimer

Conflict of interest statement

Conflict of Interest Disclosures: Dr Powell reported receiving grants from the National Institute on Drug Abuse, grants from the US Centers for Disease Control and Prevention, and grants from the US Social Security Administration outside the submitted work. No other disclosures were reported.

Figures

Figure.
Figure.. Ransomware Attacks and Weekly Emergency Department (ED) Visits and Inpatient Admissions in Attacked and Nearby Unattacked Hospitals in California, 2014-2020
A and B, the relative changes in ED visits and inpatient admissions (in logs) in hospitals with ransomware attacks (n = 15) compared with unattacked hospitals (n = 355). C and D, The relative changes in ED visits and inpatient admissions (in logs) in nearby unattacked hospitals (n = 17) compared with other unattacked hospitals (n = 20) in the same Hospital Service Area as the attacked hospital. Attacked facilities were excluded in the C and D analysis. Analyses are based on a 2-stage difference-in-differences regression model weighted by the number of total hospital beds. The 95% CIs are adjusted by clustering at the facility level and account for the 2-step process. Data are aggregated to the facility-week level. Inpatient admissions are defined as admissions involving at least 1 overnight stay. The number of intensive care units, coronary care unit, neonatal intensive care unit, and operating rooms (all in logs) and a binary variable indicating that the hospital was a teaching hospital were included as explanatory variables in addition to the facility and year-week fixed effects. Shaded areas indicate 95% CIs. The 2-stage difference-in-differences naturally normalizes mean pretreatment differences to 0. We only show the 8 weeks prior to the attack so the average of the displayed preperiod estimates in the figures may not be equal to 0.
See this image and copyright information in PMC

References

    1. Neprash HT, McGlave CC, Cross DA, et al. . Trends in ransomware attacks on US hospitals, clinics, and other health care delivery organizations, 2016-2021. JAMA Health Forum. 2022;3(12):e224873-e224873. doi:10.1001/jamahealthforum.2022.4873 - DOI - PMC - PubMed
    1. Miller M. The mounting death toll of hospital cyberattacks. Politico. December 28, 2022. Accessed March 15, 2024. https://www.politico.com/news/2022/12/28/cyberattacks-u-s-hospitals-0007...
    1. Dameff C, Tully J, Chan TC, et al. . Ransomware attack associated with disruptions at adjacent emergency departments in the US. JAMA Netw Open. 2023;6(5):e2312270. doi:10.1001/jamanetworkopen.2023.12270 - DOI - PMC - PubMed
    1. Miller DL. An introductory guide to event study models. J Econ Perspect. 2023;37(2):203-230. doi:10.1257/jep.37.2.203 - DOI
    1. Borusyak K, Jaravel X, Spiess J. Revisiting event study designs: robust and efficient estimation. Rev Econ Stud. Published online February 6, 2024. doi:10.1093/restud/rdae007 - DOI

Publication types

MeSH terms