Society for Case Research Spring Conference MBAA

Experience level: 
Intermediate
Intended Audience: 
Faculty
Authors: 
William O. Anderson, Karen Popovich

Cyberattack at the University of Vermont Medical Center: IT just takes one

The description case covers the cybersecurity ransomware attack at the University of Vermont Health Network on October 28, 2020. The network was already dealing with limited patient services due to the COVID-19 outbreak when a cyberattack interrupted critical delivery of services to patients and to the business operations. A brief overview of cyberattacks and top medical cyberattacks is provided. Details of the cyberattack from a personal interview with the Chief Technology Officer at the University of Vermont Medical Center and from secondary research traces the events and response to the crisis.