New York Blood Center hit by ransomware during winter blood shortage, restoration timeline unknown

The New York Blood Center (NYBCe) Enterprises said its operating divisions have been impacted by a ransomware attack that took place on Sunday, leaving the multi-state non-profit scrambling to restore critical services and fulfill orders.

The organization posted a 'cybersecurity incident update' on its website announcing the January 26th breach on Wednesday.

NYBCe said that as soon as it “identified suspicious activity affecting its IT systems,” it brought in third-party cybersecurity experts, who confirmed the questionable activity was the “result of a ransomware incident.”

The10-division non-profit provides not only lifesaving blood and stem cell products, plus specialty pharmaceuticals, but also clinical, technical, testing, training, and consulting services to at least 600 healthcare facilities and hospitals across 45 countries, serving over 75 million patients in the Tristate region and beyond, according to its website.

NYBCe said it immediately took steps to contain the attack, including taking its systems offline to prevent further damage, but also noted it does not have a specific timetable for system restoration.

“We understand the critical nature of our services, and the health of our communities remains our top priority. We remain in direct communication with our hospital partners and are implementing workarounds to help restore services and fulfill orders,” NYBCe said.

Ransomware attack exacerbates blood shortage

NYBCe is one of the largest independent, community-based blood centers in the United States, and the weekend ransomware attack couldn’t have come at a worse time for the critical services organization.

Just last week, the New York Blood Center and New Jersey Blood Services issued a joint statement declaring a blood emergency due to lower-than-usual donations amid freezing temperatures, calling on local residents to come out and donate.

NYCBe says the donation centers are still operating, but donors should expect longer processing times, with some donation center activities and blood drives needing to be rescheduled. The organization further noted that donors will be alerted to any changes to already scheduled appointments.

Not just a stand-alone blood bank and donation center, the health conglomerate also collaborates with dozens of research organizations, academic institutions, and biopharmaceutical companies each year.

“Your support means everything to us,” NYCBe said, adding that once systems are back up and running, NYBCe may need to "do another push for more blood donations” in the coming weeks.

The New York Blood Center directly serves New York, New Jersey, and Connecticut, plus Rhode Island, Nebraska, and parts of Delaware, Maryland, Virginia, Kansas, and Missouri.

No ransomware group has come forward to claim the attack at the time of this report.