Skip to Main Content
HBS Home
  • About
  • Academic Programs
  • Alumni
  • Faculty & Research
  • Baker Library
  • Giving
  • Harvard Business Review
  • Initiatives
  • News
  • Recruit
  • Map / Directions
Faculty & Research
  • Faculty
  • Research
  • Featured Topics
  • Academic Units
  • …→
  • Harvard Business School→
  • Faculty & Research→
Publications
Publications
  • February 2023
  • Case
  • HBS Case Collection

Ransomware Attack at Springhill Medical Center

By: Suraj Srinivasan and Li-Kuan (Jason) Ni
  • Format:Print
  • | Language:English
  • | Pages:12
ShareBar

Abstract

In July, 2019, Springhill Medical Center (“SMC”) in Mobile, Alabama, fell prey to a malicious ransomware attack that crippled the hospital’s internal network systems and public-facing web page. While the hospital rushed to securely restore the network, medical personnel scrambled workarounds to continue medical services. Amidst the chaos, a baby was born in the hospital with the umbilical cord wrapped around her neck that had resulted in severe brain injury and died nine months later. The mother and family sued SMC, alleging the hospital failed to inform her of the cyber incident, which she believed had compromised the quality of care and led to an otherwise preventable tragedy. The case discusses the important questions of how SMC had responded to the ransomware attack and how hospitals and other organizations should treat the ever-increasing threat of cyber breaches.

Keywords

Disruption; Communication; Communication Strategy; Decision Making; Decision Choices and Conditions; Judgments; Corporate Accountability; Corporate Disclosure; Corporate Governance; Governance Controls; Policy; Employees; News; Cybersecurity; Digital Strategy; Information Infrastructure; Information Management; Internet and the Web; Crisis Management; Resource Allocation; Risk Management; Negotiation Tactics; Failure; Business and Stakeholder Relations; Attitudes; Behavior; Perception; Reputation; Trust; Public Opinion; Social Issues; Health Industry; United States; Alabama

Citation

Srinivasan, Suraj, and Li-Kuan (Jason) Ni. "Ransomware Attack at Springhill Medical Center." Harvard Business School Case 123-065, February 2023.
  • Educators
  • Purchase

About The Author

Suraj Srinivasan

Accounting and Management
→More Publications

Related Work

    • March 2023 (Revised June 2023)
    • Faculty Research

    Ransomware Attack at Springhill Medical Center

    By: Suraj Srinivasan and Li-Kuan (Jason) Ni
Related Work
  • Ransomware Attack at Springhill Medical Center By: Suraj Srinivasan and Li-Kuan (Jason) Ni
ǁ
Campus Map
Harvard Business School
Soldiers Field
Boston, MA 02163
→Map & Directions
→More Contact Information
  • Make a Gift
  • Site Map
  • Jobs
  • Harvard University
  • Trademarks
  • Policies
  • Accessibility
  • Digital Accessibility
Copyright © President & Fellows of Harvard College.