--- title: Kentucky Provider Pays $70,000 Ransom to Unlock Patient Data - Interbit Data description: Park DuValle Community Health Center paid hackers $70,000, after a ransomware attack locked down the medical records of about 20,000 patients for almost two months. image: https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Imported_Blog_Media/ThinkstockPhotos-691203508-2.jpg --- [Skip to main content](https://interbitdata.com/blog/kentucky-provider-pays-70000-ransom-to-unlock-patient-data#main-content) [Knowledge Base Login](https://knowledge.interbitdata.com/en/knowledge)     [Support](https://interbitdata.com/support/) [![Interbit Logo](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg) ![Interbit Logo](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg)](https://interbitdata.com) - [Show submenu for Solutions Solutions](https://interbitdata.com/solutions/beacon) - [Beacon Downtime](https://interbitdata.com/solutions/beacon/downtime) - [Beacon Delivery](https://interbitdata.com/solutions/beacon/delivery) - [Beacon Navigator](https://interbitdata.com/solutions/beacon/navigator) - [PatientPath](https://interbitdata.com/solutions/patientpath) - [Blog](https://interbitdata.com/blog) - Show submenu for Resources Resources - [Events](https://interbitdata.com/resources/events/) - [Resources](https://interbitdata.com/resources/success-stories/) - Show submenu for About Us About Us - [Meet the Team](https://interbitdata.com/about/team) - [Partners](https://interbitdata.com/about/partners) Open main navigation Close main navigation - Show submenu for Solutions Solutions - Solutions - [Solutions](https://interbitdata.com/solutions/beacon) - [Beacon Downtime](https://interbitdata.com/solutions/beacon/downtime) - [Beacon Delivery](https://interbitdata.com/solutions/beacon/delivery) - [Beacon Navigator](https://interbitdata.com/solutions/beacon/navigator) - [PatientPath](https://interbitdata.com/solutions/patientpath) - [Blog](https://interbitdata.com/blog) - Show submenu for Resources Resources - Resources - [Events](https://interbitdata.com/resources/events/) - [Resources](https://interbitdata.com/resources/success-stories/) - Show submenu for About Us About Us - About Us - [Meet the Team](https://interbitdata.com/about/team) - [Partners](https://interbitdata.com/about/partners) - Search - [Request a Demo](https://interbitdata.com/request-a-demo) [Request a Demo](https://interbitdata.com/request-a-demo) Search [Blog](https://interbitdata.com/blog) Tags - [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) - [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) - [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) - [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) - [Company News](https://interbitdata.com/blog/tag/company-news) - [Cyberattack](https://interbitdata.com/blog/tag/cyberattack) - [Cyberattacks](https://interbitdata.com/blog/tag/cyberattacks) Search - [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) - [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) - [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) - [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) - [Company News](https://interbitdata.com/blog/tag/company-news) - [Cyberattack](https://interbitdata.com/blog/tag/cyberattack) - [Cyberattacks](https://interbitdata.com/blog/tag/cyberattacks) [Business Continuity,](https://interbitdata.com/blog/tag/business-continuity) [Cyber Hygiene,](https://interbitdata.com/blog/tag/cyber-hygiene) [IT Challenges,](https://interbitdata.com/blog/tag/it-challenges) [Healthcare Information Systems,](https://interbitdata.com/blog/tag/healthcare-information-systems) [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) # Kentucky Provider Pays $70,000 Ransom to Unlock Patient Data by [Alex Konstantinovsky](https://interbitdata.com/blog/author/alex-konstantinovsky) Jul 30, 2019 ## Park DuValle Community Health Center paid hackers $70,000, after a ransomware attack locked down the medical records of about 20,000 patients for almost two months.  #### Health IT Security By Jessica Davis | July 29, 2019 Louisville, Kentucky-based Park DuValle Community Health Center recently paid hackers a ransom of $70,000 to unlock the medical records of about 20,000 patients, after a ransomware attack locked the providers out of their system for almost two months, according to local news outlet *WDRB.* The nonprofit health center, which provides care for low-income patients and the uninsured, fell victim to a ransomware attack on June 7, which impacted its medical records system and appointment scheduling platform. Officials said it was the second ransom-based attack on their computer system since April. The previous attack locked down computers for about three weeks. However, officials said they were able to rebuild its systems afterward using backups that were stored elsewhere. They did not pay the first ransom. However, after the second attack, Park DuValle officials contacted the FBI and outside information specialists and decided to pay the ransom instead of rebuilding the system from scratch. Payments were made installments: one paid two weeks ago and the other was paid last week in the form of 6 bitcoins, or about $70,000. The report did not outline the details that differed in this attack from the ransomware event in April that prompted Park DuValle to pay the ransom instead of rebuilding its system again. Typically, the FBI and security researchers all warn against paying ransoms as there is no guarantee data will be restored. Further, paying ransoms encourages hackers to continue targeting the sector. The hackers provided encryption keys, which the health center is using to restore the data. Officials said the hope is to have full data access restored by August 1. In total, officials said the ransomware attack has cost the provider upwards of $1 million. The four Park DuValle clinics have been operating on downtime since the event, writing down all patient and treatment information on paper and storing files in boxes. As a result, clinicians have been unable to schedule appoints, while patients had to provide details on their medical histories or treatments from memory. The ransomware attack impacted the records of both current and former patients, which includes insurance details, contact information, and medical data. Officials said hackers did not obtain the data, but they are without access to the information: “It’s like having a piece of paper and it’s in a foreign language that you don’t understand.” Officials have notified the Department of Health and Human Services already, given Park DuValle is partially government funded. The network firewalls show there was no outgoing data, and therefore no breach, according to officials. Ransomware attacks are typically monetarily driven. But given the complexity of the attacks, in 2017, HHS reworked its ransomware-related [definition](https://www.hhs.gov/sites/default/files/RansomwareFactSheet.pdf) for breach notifications to place the burden of proof on providers. Park DuValle will need to be able to prove, not only that the data did not leave the system, but that hackers did not view or access patient information. Park Duvalle is one of several providers to report ransomware incidents in the past two weeks. On July 19, Bayamon Medical Center and Puerto Rico Women and Children’s Hospital reported they fell victim to a similar attack, which encrypted patient files of more than 500,000 patients. The notice did not show whether officials paid the ransom or whether those files have been recovered. While ransomware attacks have declined in most sectors, [healthcare](https://healthitsecurity.com/news/healthcare-continues-to-bear-the-brunt-of-ransomware-attacks) and government systems have remained prime targets given their typically vulnerable systems and need for data access. A recent report showed that [the cost](https://healthitsecurity.com/news/ransomware-costs-on-the-rise-causes-nearly-10-days-of-downtime) of ransomware attacks are on the rise, causing nearly 10 days of downtime. Tags: [Business Continuity](https://interbitdata.com/blog/tag/business-continuity) [Cyber Hygiene](https://interbitdata.com/blog/tag/cyber-hygiene) [IT Challenges](https://interbitdata.com/blog/tag/it-challenges) [Healthcare Information Systems](https://interbitdata.com/blog/tag/healthcare-information-systems) [Cybersecurity](https://interbitdata.com/blog/tag/cybersecurity) **[Alex Konstantinovsky](https://interbitdata.com/blog/author/alex-konstantinovsky)** Jul 30, 2019 ## Related Articles [![Cybersecurity is Clinical Infrastructure:  Why Hospitals Need a Resilience Strategy](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/iStock-963458566-Jul-28-2026-07-39-32-7419-PM.jpg?width=500&height=500&name=iStock-963458566-Jul-28-2026-07-39-32-7419-PM.jpg) Cybersecurity is Clinical Infrastructure:  Why Hospitals Need a Resilience Strategy](https://interbitdata.com/blog/time-to-reframe-the-shiny-object-in-healthcare-it) [![EHR report distribution: 3 workflow basics for hospital efficiency](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Blog%20Post_EHR%20Report%20Distribution.png?width=500&height=500&name=Blog%20Post_EHR%20Report%20Distribution.png) EHR report distribution: 3 workflow basics for hospital efficiency](https://interbitdata.com/blog/ehr-report-distribution-workflow-basics-for-hospital-efficiency) [![Is Your Hospital ETDBW?](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/patientpath-conversation-1.png?width=500&height=500&name=patientpath-conversation-1.png) Is Your Hospital ETDBW?](https://interbitdata.com/blog/is_your_hospital-etdbw) [![Ponemon: Business continuity management vital for data breach recovery](https://21178601.fs1.hubspotusercontent-na1.net/hub/21178601/hubfs/Imported_Blog_Media/IT-staff-computers-712-1.jpg?width=500&height=500&name=IT-staff-computers-712-1.jpg) Ponemon: Business continuity management vital for data breach recovery](https://interbitdata.com/blog/ponemon-business-continuity-management-vital-for-data-breach-recovery) [![Interbit Data, Inc.](https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%202026/Interbit%20Logos/logo-interbit-retina-svg.svg)](https://interbitdata.com/) Uptime, Downtime, Anytime! - - Keeping critical information moving securely and reliably for nearly 30 years. [Contact Us](https://interbitdata.com/contact/) [info@interbitdata.com](mailto:info@interbitdata.com) 508.647.0013 207 Union Street, 1st Floor Natick, MA 01760 - [About](https://interbitdata.com/about/team) - [Blog](https://interbitdata.com/blog/) - [Events](https://interbitdata.com/resources/events/) - [Support](https://interbitdata.com/support/) Copyright ©2026 All Rights Reserved. - [Privacy and Cookie Policy](https://interbitdata.com/privacy-cookie-policy/) - [Terms and Conditions](https://interbitdata.com/terms_conditions/) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Alex Konstantinovsky", "url" : "https://interbitdata.com/blog/author/alex-konstantinovsky" }, "dateModified" : "2026-07-28T19:42:48.357Z", "datePublished" : "2019-07-30T12:32:48.000Z", "headline" : "Kentucky Provider Pays $70,000 Ransom to Unlock Patient Data - Interbit Data", "image" : [ "https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Imported_Blog_Media/ThinkstockPhotos-691203508-2.jpg" ], "mainEntityOfPage" : { "@id" : "https://interbitdata.com/blog/kentucky-provider-pays-70000-ransom-to-unlock-patient-data", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://21178601.fs1.hubspotusercontent-na1.net/hubfs/21178601/Interbit%20logo%20-%20with%20Reg.png" }, "name" : "Interbit Data" } } ```