Case Analysis

Introduction to case

 This is a scenario of Sunnylake hospital. The hospital’s

reputation and patients lives are at stake as the
Electronic Medical Records(implemented since 3
years) has been hacked. Hackers have demanded a
ransom of $100,000. The CEO is in a dilemma whether
to pay or not ?
 Problem

 Unable to access patient records.

 Unable to restore backup immediately.
 Few patients are in critical condition.
 Legal hassles.
 Socio-economic reputation at stake.
 Repercussions

 Threat to life of patients

 Probability of losing patient’s record
 Legal Issues
 Reputation Concerns
 Dilemma to use technology in future
 Solution

 IT team working towards resolving the issue.

 Inform government authorities.
 Separate team deployed to restore the backup
system.
 Critical patients being handled by experts.
 24 hour timeframe given to resolve the situation.
 Learning

 Separate offline backup system in place.

 Upgrade the systems with the latest security
software.
 Background check to be done on all future
recruitments in IT department.
 Simulating similar scenarios at regular intervals.
 Alerting other organizations against similar attacks.
 Moral Fibre

 Not to encourage such anti-social elements.

 Further strengthening the moral backbone against
cyber crime.