The Alaska Department of Health and Social Services completed the first of a three-step process to recover from the attack on its information technology infrastructure.
Back online are a few services, such as the ability to get birth, death, and marriage certificates.
The “detection and analysis phase” is complete and the department’s security contractors identified those responsible for conducting the attack. The department has called it “a highly sophisticated group known to conduct complex cyberattacks against organizations such as state governments and health care entities,” but did not elaborate.
“At this time, the investigation has found no indications that this was a ransomware attack and there is no current evidence that Alaskans’ protected health information or personally identifiable information was stolen,” the department said in a statement.
“The type of group behind this disruptive attack is a very serious operation with advanced capabilities,” said Commissioner Adam Crum. “DHSS is intensely focused on responding to the attack and we continue to work with our security partners and the state Office of Information Technology to restore services as quickly and safely as possible.”
“This was not a ‘one-and-done’ situation, but rather a sophisticated attack intended to be carried out undetected over a prolonged period. The attackers took steps to maintain that long-term access even after they were detected,” said Technology Officer Scott McCutcheon. “In addition to getting everything back up and running, our team is taking strong, preventative actions and developing more robust incident response capabilities so we can quickly respond to any future cyberattacks.”
DHSS is focused on:
- Containment, eradication and recovery: “Significant progress has been made in removing the attacker from DHSS systems and we have no evidence of the attacker being active in our environment at this time. Recovery work continues to build back resilient systems and restoring services. A firm timeline on full restoration of services is not yet known as the Information Technology Incident Response Team is developing and implementing new processes and technologies to provide more secure and resilient services.”
- Post-incident activity: “DHSS will further strengthen its processes, tools and people to be more resilient to future cyberattacks. Recommendations for future security enhancements and any additional funding needs will be provided to Commissioner Crum.”
The first system brought back online was the Electronic Vital Records System used by the Health Analytics and Vital Records Section (HAVRS) to fulfill requests for vital records such as birth, death and marriage certificates.
Access to the system was restored on July 26, HAVRS has been transitioning back to automated processes and addressing the backlog of work created by the outage.
Both the Juneau and Anchorage Vital Records Offices have restored most of their certificate services, with a few limitations in place so staff can focus on processing the backlog orders.
There is no timeline for how long it will take to eliminate the backlog, but this task is a priority for HAVRS, and staffing has been adjusted to work through the process as quickly as possible, the department said.
More details about limitations and current capabilities at HAVRS are posted online at dhss.alaska.gov/dph/vitalstats/pages/.
“As systems move closer to coming back online, DHSS recognizes this lengthy outage of many of its online services has been disruptive to Alaskans but again asks for everyone’s patience as we work through this ongoing situation. Staff are working as efficiently as they can to process requests in a timely manner; however, in many cases, the procedures they have been following take longer due to the need to perform tasks manually,” the department said.
For phone assistance during business hours (8 a.m. – 4:30 p.m.), contact the department at 907-269-7800 or download this detailed list of contacts for divisions, sections and programs. Many divisions have temporary webpages available with their most critical information and forms at dhss.alaska.gov.
For questions specific to COVID-19, the COVID-19 vaccine helpline is available at 907-646-3322 from 9 a.m. – 6:30 p.m. on weekdays, and 9 a.m. – 4:30 p.m. on weekends. You may also email [email protected] for help or visit the temporary COVID-19 section of the DHSS website at dhss.alaska.gov/dph/epi/id/pages/COVID-19/default.aspx.
I once suffered from a cyberattack, and fortunately had data backed up. There is still a place in society for drawing and quartering.
The State employees working to resolve this situation deserve to be thanked, but so far this comments section is completely devoid of such sentiments.
No doubt, subsequent commenters will find some way to disparage them after reading this article. Just watch.
Only you disparage. Only you.
Now it is time to link vital statistics and the DMV with the division of elections to autopurge voters who have had a death certificate issued or notification from another state that a former resident has established residency elsewhere.
This should be automatic and not require the intervention of a human.
Comments are closed.