Ascension Saint Agnes declares ‘Mini Disaster,’ pauses emergency department admissions after cyberattack

Ascension Saint Agnes Hospital’s emergency department in Southwest Baltimore has stopped receiving new patients, following a cyberattack that has affected clinical operations at Ascension health centers nationwide.

The Maryland Institute for Emergency Medical Services Systems has informed local emergency medical services of the hospital’s “Mini Disaster” status, according to a news alert from the institute sent Wednesday night. MIEMSS will alert the EMS system when Saint Agnes announces that the situation has been resolved and its hospital can safely resume receiving new emergency department patients, the release says.

Justin Blome, a spokesperson for the hospital, said Thursday morning that the emergency department doesn’t have a timeline for when patients will be received again. In the meantime, EMS workers are taking patients whom they previously would have taken to Saint Agnes to neighboring hospitals instead.

Dr. Ted Delbridge, executive director of MIEMMS, couldn’t say exactly how the hospital’s Mini Disaster status would affect the rest of Maryland’s emergency departments on Thursday morning. However, he said the institute is hearing from EMS agencies who typically bring patients to Saint Agnes that they are anxious for the hospital’s emergency department to reopen.

Hospitals typically declare Mini Disaster status when their emergency departments are unable to accept patients due to a fire, power outage, gas leak or other similar problem affecting their facilities, Delbridge said. Although local hospitals occasionally experience disruptions in emergency department services because of technological problems, it’s rare for them to suspend emergency department services for longer than an hour or two, he said.

Officials at Ascension, a nonprofit Catholic health system with about 140 hospitals across the country, detected unusual activity on some technology network systems on Wednesday, which they determined to be from a “cyber security event,” according to a news release on Thursday.

The health system’s care teams have initiated procedures to ensure patient care is affected as minimally as possible and continues to be delivered safely, but there has been a disruption to clinical operations, the news release says.

Mandiant, a cybersecurity firm headquartered in Virginia, is assisting Ascension in investigating and addressing the attack, and the health system has notified the appropriate authorities, the release says.

“Together, we are working to fully investigate what information, if any, may have been affected by the situation,” the release says. “Should we determine that any sensitive information was affected, we will notify and support those individuals in accordance with all relevant regulatory and legal guidelines.”

This story will be updated.