{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,12]],"date-time":"2026-10-12T02:13:34Z","timestamp":1791771214361,"version":"4.3.4"},"reference-count":106,"publisher":"JMIR Publications Inc.","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["J Med Internet Res"],"abstract":"Abstract<\/jats:title>\n \n Background<\/jats:title>\n Cyberattacks against health care organizations are rising in frequency and shifting in nature from data theft to intentional denial of care.<\/jats:p>\n <\/jats:sec>\n \n Objective<\/jats:title>\n This systematic review identifies and characterizes patient-level harms occurring during hospital cyberattacks across international settings, determines which clinical populations are most vulnerable, and compares patient-level harms reported in peer-reviewed case studies with those described in patient and provider narratives on social media.<\/jats:p>\n <\/jats:sec>\n \n Methods<\/jats:title>\n Following PRISMA (Preferred Reporting Items for Systematic Reviews and Meta-Analyses) 2020, PRISMA-S (Preferred Reporting Items for Systematic Reviews and Meta-Analyses\u2013Search), and the SWiM (Synthesis Without Meta-analysis) reporting guidelines, we searched MEDLINE, Embase, PubMed, Scopus, and Web of Science for peer-reviewed studies published between January 1, 2004, and July 1, 2026 describing cyberattacks affecting clinical care in health care delivery organizations. Quantitative synthesis was not performed because the included studies reported structurally incompatible outcome types for which no common effect measure existed; synthesis without meta-analysis was conducted according to SWiM. In parallel, a Python (Python Software Foundation) pipeline mined 3408 health care\u2013related subreddits for cyberattack terms extracted during the academic review; posts were reviewed by clinical team members to ensure relevance and coded to clinical specialties and technical failure domains.<\/jats:p>\n <\/jats:sec>\n \n Results<\/jats:title>\n Fifty-nine studies were included, from which 316 patient-level harms were identified across the combined datasets. Two distinct categories of at-risk patients emerged: those harmed by time-criticality, including patients with stroke, cardiac arrest, and major trauma, for whom delays of minutes to hours are clinically decisive; and those harmed by the intersection of digital dependence and potential for rapid clinical decline, including patients with cancer, patients with diabetes, and those dependent on community prescribing. Specific technical failures were linked to distinct clinical consequences, including those stemming from (1) hardware (oncological harms due to compromised linear accelerators), (2) software (risks for patients with fractures due to failures in digital templating software), and (3) networks\/connectivity (fetal deaths due to telemetry failures). Social media data exposed wider harms resulting from infrastructural issues, including compromised door access systems preventing life-saving treatment, failures in ward-based alarms, and closed-circuit television (CCTV) affecting staff\/patient safety, and disrupted health-at-home services preventing community therapies.<\/jats:p>\n <\/jats:sec>\n \n Conclusions<\/jats:title>\n Our study is the first to systematically integrate global case study evidence with large-scale social media data to provide a clinically focused synthesis of patient-level harms during health care cyberattacks. The resulting open-source Cyberattack Impacts, Patient Harms & Emergency Response (CIPHER) dataset links technical failure domains to downstream clinical risks across care settings. As cyberattacks on health care organizations continue to rise in frequency and severity, the boundary between cybersecurity and patient safety has become increasingly blurred, demanding unified frameworks that treat digital resilience and clinical preparedness as inseparable expressions of the same obligation to patients.<\/jats:p>\n <\/jats:sec>","DOI":"10.2196\/88257","type":"journal-article","created":{"date-parts":[[2026,9,29]],"date-time":"2026-09-29T15:53:21Z","timestamp":1790697201000},"page":"e88257-e88257","source":"Crossref","is-referenced-by-count":1,"title":["Unveiling Patient-Level Harms and At-Risk Clinical Groups During Hospital Cyberattacks: Systematic Review of Global Case Studies and Social Media Data"],"prefix":"10.2196","volume":"28","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0003-3550","authenticated-orcid":false,"given":"Isabel","family":"Straw","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0224-5031","authenticated-orcid":false,"given":"Deepak","family":"Kumar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-2120-3570","authenticated-orcid":false,"given":"Seoyoung","family":"Kweon","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0051-6600","authenticated-orcid":false,"given":"Jordan","family":"Selzer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9613-2603","authenticated-orcid":false,"given":"Christian","family":"Dameff","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3537-6716","authenticated-orcid":false,"given":"Jeffrey","family":"Tully","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1010","published-online":{"date-parts":[[2026,9,28]]},"reference":[{"key":"R1","unstructured":"Gilbert D . Health system to pay $65 million after hackers leaked nude patient photos. Washington Post. 2024. URL: https:\/\/www.washingtonpost.com\/business\/2024\/09\/22\/health-system-pay-65-million-after-hackers-leaked-nude-patient-photos\/ [Accessed 24-08-2026]"},{"key":"R2","unstructured":"Baby died because of ransomware attack on hospital, suit says. NBC News. 2021. URL: https:\/\/www.nbcnews.com\/news\/baby-died-due-ransomware-attack-hospital-suit-claims-rcna2465 [Accessed 24-08-2026]"},{"key":"R3","unstructured":"Thomas R . The independent \u2018\u201clife-saving\u201d operations cancelled by NHS hospitals after cyberattack\u2019. The Independent. 2024. URL: https:\/\/www.independent.co.uk\/news\/health\/nhs-cyberattack-hospitals-operations-cancelled-cancer-b2559751.html [Accessed 10-06-2024]"},{"issue":"12","key":"R4","doi-asserted-by":"publisher","DOI":"10.1001\/jamahealthforum.2022.4873","article-title":"Trends in ransomware attacks on US hospitals, clinics, and other health care delivery organizations, 2016-2021","volume":"3","author":"Neprash","journal-title":"JAMA Health Forum"},{"key":"R5","unstructured":"Ransomware attacks on hospitals have changed. American Hospital Association. URL: https:\/\/www.aha.org\/center\/cybersecurity-and-risk-advisory-services\/ransomware-attacks-hospitals-have-changed [Accessed 20-05-2025]"},{"key":"R6","unstructured":"The role of cyber in the russian war against Ukraine: its impact and the consequences for the future of armed conflict. European Parliament. 2023. URL: https:\/\/www.europarl.europa.eu\/thinktank\/en\/document\/EXPO_BRI(2023)702594 [Accessed 24-04-2025]"},{"key":"R7","unstructured":"Ralston W . The untold story of a cyberattack, a hospital and a dying woman. Wired. URL: https:\/\/www.wired.com\/story\/ransomware-hospital-death-germany [Accessed 03-03-2025]"},{"key":"R8","unstructured":"Nearly 200 patients harmed in major cyber attack. PSL (Patient Safety Learning). 2024. URL: https:\/\/www.pslhub.org\/blogs\/entry\/8621-nearly-200-patients-harmed-in-major-cyber-attack\/ [Accessed 18-06-2025]"},{"key":"R9","unstructured":"Jones C . Qilin ransomware attack on NHS supplier contributed to patient fatality. The Register. URL: https:\/\/www.theregister.com\/2025\/06\/26\/qilin_ransomware_nhs_death [Accessed 26-06-2025]"},{"key":"R10","unstructured":"Change healthcare cyberattack underscores urgent need to strengthen cyber preparedness for individual health care organizations and as a field. American Healthcare Association. URL: https:\/\/www.aha.org\/change-healthcare-cyberattack-underscores-urgent-need-strengthen-cyber-preparedness-individual-health-care-organizations-and [Accessed 23-10-2025]"},{"issue":"1","key":"R11","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1016\/j.annemergmed.2023.04.025","article-title":"Hacking acute care: a qualitative study on the health care impacts of ransomware attacks against hospitals","volume":"83","author":"van Boven","journal-title":"Ann Emerg Med"},{"key":"R12","unstructured":"Greenberg A . Hacker charged with seeking to kill using cyberattacks on hospitals. Wired (Online). 2024. URL: https:\/\/www.wired.com\/story\/anonymous-sudan-ddos-indictment-takedown\/ [Accessed 24-08-2026]"},{"key":"R13","doi-asserted-by":"publisher","DOI":"10.3389\/fdgth.2024.1321485","article-title":"When all computers shut down: the clinical impact of a major cyber-attack on a general hospital","volume":"6","author":"Abbou","journal-title":"Front Digit Health"},{"issue":"1","key":"R14","doi-asserted-by":"publisher","DOI":"10.1186\/s12911-018-0724-5","article-title":"The state of research on cyberattacks against hospitals and available best practice recommendations: a scoping review","volume":"19","author":"Argaw","journal-title":"BMC Med Inform Decis Mak"},{"issue":"1","key":"R15","doi-asserted-by":"publisher","DOI":"10.1186\/s12911-020-01161-7","article-title":"Cybersecurity of hospitals: discussing the challenges and working towards mitigating the risks","volume":"20","author":"Argaw","journal-title":"BMC Med Inform Decis Mak"},{"issue":"1","key":"R16","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3233\/THC-161263","article-title":"Cybersecurity in healthcare: a systematic review of modern threats and trends","volume":"25","author":"Kruse","journal-title":"Technol Health Care"},{"key":"R17","doi-asserted-by":"publisher","DOI":"10.2196\/50505","article-title":"Insights from a clinically orientated workshop on health care cybersecurity and medical technology: observational study and thematic analysis","volume":"26","author":"Straw","journal-title":"J Med Internet Res"},{"issue":"1","key":"R18","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3233\/THC-151102","article-title":"Cyber threats to health information systems: a systematic review","volume":"24","author":"Luna","journal-title":"Technol Health Care"},{"issue":"1","key":"R19","doi-asserted-by":"publisher","DOI":"10.2196\/46904","article-title":"Vulnerability to cyberattacks and sociotechnical solutions for health care systems: systematic review","volume":"26","author":"Ewoh","journal-title":"J Med Internet Res"},{"issue":"1","key":"R20","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1097\/HCO.0000000000000815","article-title":"Cybersecurity threats to cardiac implantable devices: room for improvement","volume":"36","author":"Tomaiko","journal-title":"Curr Opin Cardiol"},{"issue":"3","key":"R21","doi-asserted-by":"publisher","first-page":"228","DOI":"10.1089\/hs.2019.0123","article-title":"Healthcare challenges in the era of cybersecurity","volume":"18","author":"Tully","journal-title":"Health Secur"},{"issue":"8","key":"R22","doi-asserted-by":"publisher","first-page":"957","DOI":"10.1016\/j.healthpol.2021.05.016","article-title":"A comparative study of public health and social measures of COVID-19 advocated in different countries","volume":"125","author":"Wang","journal-title":"Health Policy"},{"issue":"1","key":"R23","doi-asserted-by":"publisher","first-page":"7","DOI":"10.1111\/1468-0009.12038","article-title":"Social media and internet-based data in global systems for public health surveillance: a systematic review","volume":"92","author":"Velasco","journal-title":"Milbank Q"},{"issue":"11","key":"R24","doi-asserted-by":"publisher","first-page":"2370","DOI":"10.1016\/j.mayocp.2020.08.022","article-title":"Correlations between COVID-19 cases and Google Trends data in the United States: a state-by-state analysis","volume":"95","author":"Kurian","journal-title":"Mayo Clin Proc"},{"key":"R25","doi-asserted-by":"publisher","DOI":"10.2196\/46867","article-title":"Investigating COVID-19\u2019s impact on mental health: trend and thematic analysis of Reddit users\u2019 discourse","volume":"25","author":"Zhu","journal-title":"J Med Internet Res"},{"key":"R26","doi-asserted-by":"crossref","unstructured":"Whitfield C Liu Y Anwar M . Surveillance of COVID-19 pandemic using social media: a reddit study in north carolina. Presented at: In Proceedings of the 12th ACM International Conference on Bioinformatics, Computational Biology, and Health Informatics; Aug 1-4, 2021:1-8; Fl, US. [doi: 10.1145\/3459930.3469550]","DOI":"10.1145\/3459930.3469550"},{"issue":"4","key":"R27","doi-asserted-by":"publisher","first-page":"499","DOI":"10.1016\/j.icte.2021.12.003","article-title":"Cyberattack detection model using community detection and text analysis on social media","volume":"8","author":"Park","journal-title":"ICT Express"},{"key":"R28","doi-asserted-by":"crossref","unstructured":"Abusaqer M Benaoumeur Senouci M Magel K . Twitter user sentiments analysis: health system cyberattacks case study. Presented at: 2023 International Conference on Artificial Intelligence in Information and Communication (ICAIIC); Feb 20-23, 2023; Bali, Indonesia. [doi: 10.1109\/ICAIIC57133.2023.10067026]","DOI":"10.1109\/ICAIIC57133.2023.10067026"},{"key":"R29","unstructured":"Healthcare information and management systems society. HIMSS Cybersecurity Survey. 2020. URL: https:\/\/www.himss.org\/resources\/2020-himss-healthcare-cybersecurity-survey\/ [Accessed 24-08-2026]"},{"issue":"4","key":"R30","doi-asserted-by":"publisher","DOI":"10.2196\/21747","article-title":"Health care cybersecurity challenges and solutions under the climate of COVID-19: scoping review","volume":"23","author":"He","journal-title":"J Med Internet Res"},{"key":"R31","unstructured":"Straw I Tully J Dameff C . CIPHER dataset v1: patient harms during hospital cyberattacks (v1.0.1) [dataset]. The CIPHER Platform; 2025. [doi: 10.5281\/zenodo.17344644]"},{"issue":"7","key":"R32","doi-asserted-by":"publisher","DOI":"10.1001\/jamanetworkopen.2025.30226","article-title":"Patient care technology disruptions associated with the CrowdStrike outage","volume":"8","author":"Tully","journal-title":"JAMA Netw Open"},{"key":"R33","unstructured":"Lefebvre C Glanville J Briscoe S et al. Chapter 4: searching for and selecting studies. In: Higgins JP Thomas J Chandler J Cumpston M Li T Page MJ , editors. Cochrane Handbook for Systematic Reviews of Interventions Version 651 Cochrane. 2025. URL: https:\/\/www.cochrane.org\/authors\/handbooks-and-manuals\/handbook\/current\/chapter-04 [Accessed 09-09-2026]"},{"issue":"1","key":"R34","doi-asserted-by":"publisher","DOI":"10.1186\/s13643-020-01542-z","article-title":"PRISMA-S: an extension to the PRISMA statement for reporting literature searches in systematic reviews","volume":"10","author":"Rethlefsen","journal-title":"Syst Rev"},{"key":"R35","doi-asserted-by":"publisher","DOI":"10.1016\/j.jclinepi.2020.07.005","article-title":"Using the full PICO model as a search tool for systematic reviews resulted in lower recall for some PICO elements","volume":"127","author":"Frandsen","journal-title":"J Clin Epidemiol"},{"key":"R36","doi-asserted-by":"publisher","DOI":"10.1016\/j.jclinepi.2021.08.030","article-title":"Around ten percent of most recent Cochrane reviews included outcomes in their literature search strategy and were associated with potentially exaggerated results: a research-on-research study","volume":"141","author":"Tsujimoto","journal-title":"J Clin Epidemiol"},{"issue":"1","key":"R37","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1080\/1941126X.2018.1444339","article-title":"Rayyan for systematic reviews","volume":"30","author":"Johnson","journal-title":"J Electron Resour Librariansh"},{"key":"R38","unstructured":"Borenstein M Hedges LV Higgins JPT Rothstein HR . Chapter 40: when does it make sense to perform a meta-analysis? In: Introduction to Meta-Analysis. John Wiley and Sons; 2009:357-364. URL: https:\/\/meta-analysis.com\/download\/when_does_it_make_sense_to_perform_a_meta-analysis.pdf?srsltid=AfmBOoqLdWBMSXQUyd7SjK2A0HE2a7sD6vnWE54HIXY1ateH79UBfeV8 [Accessed 24-08-2026]"},{"key":"R39","doi-asserted-by":"publisher","DOI":"10.1136\/bmj.l6890","article-title":"Synthesis without meta-analysis (SWiM) in systematic reviews: reporting guideline","volume":"368","author":"Campbell","journal-title":"BMJ"},{"issue":"4","key":"R40","doi-asserted-by":"publisher","first-page":"285","DOI":"10.3233\/EFI-180221","article-title":"The Mixed Methods Appraisal Tool (MMAT) version 2018 for information professionals and researchers","volume":"34","author":"Hong","journal-title":"Educ Inf"},{"key":"R41","doi-asserted-by":"publisher","DOI":"10.2196\/85456","article-title":"Communication strategies to promote patient engagement in telemedicine: systematic review","volume":"28","author":"Hu","journal-title":"J Med Internet Res"},{"issue":"15_suppl","key":"R42","doi-asserted-by":"publisher","first-page":"e23012","DOI":"10.1200\/JCO.2021.39.15_suppl.e23012","article-title":"Cancer-related subreddits: a comprehensive survey and correlation of membership and tumor subtype prevalence, incidence, and survival","volume":"39","author":"Shakespeare","journal-title":"J Clin Oncol"},{"issue":"5","key":"R43","doi-asserted-by":"publisher","first-page":"572","DOI":"10.1080\/10410236.2020.1731937","article-title":"Oral healthcare implications of dedicated online communities: a computational content analysis of the r\/dentistry subreddit","volume":"36","author":"Britt","journal-title":"Health Commun"},{"key":"R44","unstructured":"\u201cNational centre for health statistics - diseases and conditions\u201d faststats. Centre for Disease Control. 2019. URL: https:\/\/www.cdc.gov\/nchs\/fastats\/diseases-and-conditions.htm [Accessed 24-08-2026]"},{"issue":"5","key":"R45","doi-asserted-by":"publisher","DOI":"10.1016\/j.adro.2022.100896","article-title":"The impact of a cyberattack at a radiation oncology department: immediate response and future preparedness","volume":"7","author":"Oliver","journal-title":"Adv Radiat Oncol"},{"key":"R46","doi-asserted-by":"crossref","unstructured":"Filipec O Plasil D . The case of the bene\u0161ov hospital hit by ryuk ransomware, and lessons learned. Obrana a strategie, University of Defence; 2021. [doi: 10.3849\/1802-7199.21.2021.01.027-052]","DOI":"10.3849\/1802-7199.21.2021.01.027-052"},{"issue":"6-7","key":"R47","doi-asserted-by":"publisher","first-page":"938","DOI":"10.1016\/j.canrad.2022.06.011","article-title":"Cyberattack at Dax hospital: presentation of the facts, consequences and feedback","volume":"26","author":"Pontier","journal-title":"Cancer Radiother"},{"key":"R48","doi-asserted-by":"publisher","DOI":"10.1016\/j.jcpo.2023.100466","article-title":"Dealing with digital paralysis: surviving a cyberattack in a National Cancer center","volume":"39","author":"Keogh","journal-title":"J Cancer Policy"},{"issue":"2","key":"R49","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1136\/medethics-2021-107876","article-title":"Navigating our way through a hospital ransomware attack: ethical considerations in delivering acute orthopaedic care","volume":"49","author":"Hoffman","journal-title":"J Med Ethics"},{"issue":"12","key":"R50","doi-asserted-by":"publisher","DOI":"10.7196\/SAMJ.2024.v114i12.2549","article-title":"Cyberattack on the National Health Laboratory Service of South Africa - implications, response and recommendations","volume":"114","author":"Cassim","journal-title":"S Afr Med J"},{"issue":"1","key":"R51","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1200\/OP.21.00116","article-title":"Cancer care in the wake of a cyberattack: how to prepare and what to expect","volume":"18","author":"Ades","journal-title":"JCO Oncol Pract"},{"issue":"1","key":"R52","doi-asserted-by":"publisher","first-page":"106","DOI":"10.1177\/10398562241291340","article-title":"Cybersecurity lessons from the Vastaamo psychotherapy data breach for psychiatrists and other mental healthcare providers","volume":"33","author":"Looi","journal-title":"Australas Psychiatry"},{"issue":"1","key":"R53","doi-asserted-by":"publisher","DOI":"10.1038\/s41746-019-0161-6","article-title":"A retrospective impact analysis of the WannaCry cyberattack on the NHS","volume":"2","author":"Ghafur","journal-title":"NPJ Digit Med"},{"issue":"12","key":"R54","doi-asserted-by":"publisher","DOI":"10.1016\/j.injury.2023.111046","article-title":"Triumph over adversity: unlocking optimal trauma outcomes during healthcare ransomware attacks","volume":"54","author":"Kelly","journal-title":"Injury"},{"issue":"4","key":"R55","doi-asserted-by":"publisher","DOI":"10.1097\/CCE.0000000000001079","article-title":"Ransomware cyberattack associated with cardiac arrest incidence and outcomes at Untargeted, Adjacent Hospitals","volume":"6","author":"Pham","journal-title":"Crit Care Explor"},{"issue":"4","key":"R56","doi-asserted-by":"publisher","first-page":"728","DOI":"10.1111\/jrh.12834","article-title":"What happens to rural hospitals during a ransomware attack? Evidence from Medicare data","volume":"40","author":"Neprash","journal-title":"J Rural Health"},{"issue":"5","key":"R57","doi-asserted-by":"publisher","DOI":"10.1016\/j.adro.2022.100897","article-title":"Impact of and response to cyberattacks in radiation oncology","volume":"7","author":"Nelson","journal-title":"Adv Radiat Oncol"},{"key":"R58","doi-asserted-by":"publisher","DOI":"10.21037\/jlpm-23-84","article-title":"Lessons learnt in medical laboratories during a disruptive cyber-attack","volume":"9","author":"Lippi","journal-title":"J Lab Precis Med"},{"issue":"5","key":"R59","doi-asserted-by":"publisher","DOI":"10.1001\/jamanetworkopen.2023.12270","article-title":"Ransomware attack associated with disruptions at adjacent emergency departments in the US","volume":"6","author":"Dameff","journal-title":"JAMA Netw Open"},{"issue":"24","key":"R60","doi-asserted-by":"publisher","first-page":"2129","DOI":"10.1001\/jama.2024.7752","article-title":"Ransomware attacks, ED visits and inpatient admissions in targeted and nearby hospitals","volume":"331","author":"Abouk","journal-title":"JAMA"},{"issue":"5","key":"R61","doi-asserted-by":"publisher","first-page":"334","DOI":"10.1016\/j.surge.2021.09.007","article-title":"Under viral attack: an orthopaedic response to challenges faced by regional referral centres during a national cyber-attack","volume":"20","author":"Feeley","journal-title":"Surgeon"},{"issue":"1","key":"R62","doi-asserted-by":"publisher","first-page":"256","DOI":"10.1257\/pol.20240594","article-title":"Hacked to pieces? The effects of ransomware attacks on hospitals and patients","volume":"18","author":"Neprash","journal-title":"Am Econ J Econ Policy"},{"issue":"4","key":"R63","doi-asserted-by":"publisher","first-page":"414","DOI":"10.1684\/abc.2025.1988","article-title":"When code crashes the lab: operational resilience in clinical laboratories amid a cyberattack - a case study from a university hospital","volume":"83","author":"Al Haddad","journal-title":"Ann Biol Clin (Paris)"},{"key":"R64","doi-asserted-by":"publisher","DOI":"10.1136\/bmj.q1277","article-title":"NHS makes urgent appeal for blood donations after cyberattack on London hospitals","author":"Iacobucci","journal-title":"BMJ"},{"issue":"1","key":"R65","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1093\/ajcp\/aqac004","article-title":"Anatomy of a cyberattack: part 4: quality assurance and error reduction, billing and compliance, transition to uptime","volume":"158","author":"Frisch","journal-title":"Am J Clin Pathol"},{"issue":"5","key":"R66","doi-asserted-by":"publisher","first-page":"363","DOI":"10.5005\/jp-journals-10071-25203","article-title":"Cyber-resilient intensive care unit: ransomware is a patient-safety crisis-a resource-stratified approach for India","volume":"30","author":"Choudhuri","journal-title":"Indian J Crit Care Med"},{"issue":"5","key":"R67","doi-asserted-by":"publisher","DOI":"10.1016\/j.adro.2022.100993","article-title":"Effect of the cyberattack targeting the Irish health system in May 2021 on radiation treatment at St. Luke\u2019s Radiation Oncology Network","volume":"7","author":"Faul","journal-title":"Adv Radiat Oncol"},{"issue":"1","key":"R68","doi-asserted-by":"publisher","DOI":"10.1186\/s12913-023-10076-8","article-title":"A resilient workforce: patient safety and the workforce response to a cyber-attack on the ICT systems of the national health service in Ireland","volume":"23","author":"Moore","journal-title":"BMC Health Serv Res"},{"issue":"9","key":"R69","doi-asserted-by":"publisher","DOI":"10.1002\/acm2.13716","article-title":"Compensation for radiotherapy treatment interruptions due to a cyberattack: an isoeffective DVH\u2010based dose compensation decision tool","volume":"23","author":"O\u2019Shea","journal-title":"J Applied Clin Med Phys"},{"issue":"3","key":"R70","doi-asserted-by":"publisher","first-page":"258","DOI":"10.1016\/j.phacli.2025.10.010","article-title":"Retour d\u2019exp\u00e9rience sur une cyberattaque au sein d\u2019un h\u00f4pital g\u00e9n\u00e9ral: impacts et r\u00e9silience d\u2019une Pharmacie \u00e0 Usage Int\u00e9rieur PUI et de son unit\u00e9 de st\u00e9rilisation","volume":"61","author":"Vidal","journal-title":"Le Pharmacien Clinicien"},{"issue":"2","key":"R71","doi-asserted-by":"publisher","first-page":"170","DOI":"10.1016\/j.prro.2021.09.011","article-title":"How to respond to a ransomware attack? One radiation oncology department\u2019s response to a cyber-attack on their record and verify system","volume":"12","author":"Harrison","journal-title":"Pract Radiat Oncol"},{"issue":"1","key":"R72","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1053\/j.sult.2022.10.001","article-title":"Breast imaging during a cyberattack and global pandemic: what we did to pick up the pieces","volume":"44","author":"Perry","journal-title":"Semin Ultrasound CT MR"},{"issue":"6","key":"R73","doi-asserted-by":"publisher","first-page":"814","DOI":"10.1093\/ajcp\/aqab162","article-title":"Anatomy of a cyberattack: part 3: coordination in crisis, development of an incident command team, and resident education during downtime","volume":"157","author":"Stowman","journal-title":"Am J Clin Pathol"},{"key":"R74","doi-asserted-by":"publisher","DOI":"10.1200\/CCI.22.00149","article-title":"The impact of a national cyberattack affecting clinical trials: the cancer trials Ireland experience","volume":"7","author":"Harvey","journal-title":"JCO Clin Cancer Inform"},{"issue":"4","key":"R75","doi-asserted-by":"publisher","DOI":"10.1016\/S1470-2045(23)00119-5","article-title":"Cyber-attacks on health-care systems","volume":"24","author":"Devi","journal-title":"Lancet Oncol"},{"issue":"2","key":"R76","doi-asserted-by":"publisher","first-page":"562","DOI":"10.1002\/ijgo.14687","article-title":"When the lights go down in the delivery room: lessons from a ransomware attack","volume":"162","author":"Gabbay-Benziv","journal-title":"Int J Gynaecol Obstet"},{"key":"R77","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2018.06.072","article-title":"Impact of trauma hospital ransomware attack on surgical residency training","volume":"232","author":"Zhao","journal-title":"J Surg Res"},{"issue":"4","key":"R78","doi-asserted-by":"publisher","first-page":"241","DOI":"10.1016\/j.surge.2026.04.012","article-title":"The effect of a national healthcare cyberattack on the Irish hip fracture standards","volume":"24","author":"McCarthy","journal-title":"Surgeon"},{"issue":"2","key":"R79","first-page":"268","volume":"37","author":"Davids","journal-title":"EJIFCC"},{"issue":"5","key":"R80","doi-asserted-by":"publisher","first-page":"653","DOI":"10.1093\/ajcp\/aqab213","article-title":"Anatomy of a cyberattack: part 2: managing a clinical pathology laboratory during 25 days of downtime","volume":"157","author":"Goodwin","journal-title":"Am J Clin Pathol"},{"issue":"4","key":"R81","doi-asserted-by":"publisher","first-page":"510","DOI":"10.1093\/ajcp\/aqab145","article-title":"Anatomy of a cyberattack: part 1: managing an anatomic pathology laboratory during 25 days of downtime","volume":"157","author":"Stowman","journal-title":"Am J Clin Pathol"},{"key":"R82","doi-asserted-by":"crossref","unstructured":"Klatt MK . Case study analysis: cybersecurity breach at metropolitan health systems. In: In Multisector Insights in Healthcare, Social Sciences, Society, and Technology. IGI Global Scientific Publishing; 2024:115-135. [doi: 10.4018\/979-8-3693-3226-9.ch007]","DOI":"10.4018\/979-8-3693-3226-9.ch007"},{"issue":"6","key":"R83","doi-asserted-by":"publisher","first-page":"738","DOI":"10.1002\/jac5.1423","article-title":"Clinicians\u2019 experiences and reflections from a health system cyberattack","volume":"4","author":"Haase","journal-title":"J Am Coll Clin Pharm"},{"key":"R84","unstructured":"Fink J Gresko J . Consequences of the change healthcare cyberattack continue. Pharm Times. 2024. URL: https:\/\/www.pharmacytimes.com\/view\/consequences-of-the-change-healthcare-cyberattack-continue [Accessed 25-08-2026]"},{"key":"R85","doi-asserted-by":"publisher","DOI":"10.1016\/j.jhin.2021.05.009","article-title":"Coping with contagions: maintaining infection prevention and control in an Irish tertiary hospital during COVID and a debilitating nationwide ransomware virus in May 2021","volume":"114","author":"Powell","journal-title":"J Hosp Infect"},{"issue":"5","key":"R86","doi-asserted-by":"publisher","first-page":"1518","DOI":"10.1016\/j.japh.2022.03.027","article-title":"Defining key pharmacist and technician roles in response to a hospital downtime or cyberattack","volume":"62","author":"Santalo","journal-title":"J Am Pharm Assoc (2003)"},{"issue":"9","key":"R87","doi-asserted-by":"publisher","first-page":"1215","DOI":"10.1016\/S1470-2045(21)00451-4","article-title":"Increase in health-care cyberattacks affecting patients with cancer","volume":"22","author":"Gourd","journal-title":"Lancet Oncol"},{"issue":"2","key":"R88","doi-asserted-by":"publisher","first-page":"512","DOI":"10.1016\/j.jsurg.2018.08.024","article-title":"Interprofessional communication goes up when the electronic health record goes down","volume":"76","author":"Zhao","journal-title":"J Surg Educ"},{"key":"R89","doi-asserted-by":"publisher","DOI":"10.1017\/dmp.2023.86","article-title":"Learnings from a national cyberattack digital disaster during the SARS-CoV-2 pandemic in a pediatric emergency medicine department","volume":"17","author":"Leonard","journal-title":"Disaster Med Public Health Prep"},{"issue":"3","key":"R90","doi-asserted-by":"publisher","first-page":"601","DOI":"10.1177\/08465371221081549","article-title":"Lessons learned from a cyberattack on the healthcare system of newfoundland and labrador: a radiology perspective","volume":"73","author":"Strong","journal-title":"Can Assoc Radiol J"},{"key":"R91","doi-asserted-by":"crossref","unstructured":"Aljaidi M Alsarhan A Samara G et al. NHS wannacry ransomware attack: technical explanation of the vulnerability, exploitation, and countermeasures. Presented at: 2022 International Engineering Conference on Electrical, Energy, and Artificial Intelligence (EICEEAI); Nov 29 to Dec 1, 2022:1-6; Zarqa, Jordan. [doi: 10.1109\/EICEEAI56378.2022.10050485]","DOI":"10.1109\/EICEEAI56378.2022.10050485"},{"issue":"3","key":"R92","doi-asserted-by":"publisher","first-page":"731","DOI":"10.1007\/s10278-021-00466-x","article-title":"Ransomware recovery and imaging operations: lessons learned and planning considerations","volume":"34","author":"Chen","journal-title":"J Digit Imaging"},{"issue":"2","key":"R93","doi-asserted-by":"publisher","first-page":"889","DOI":"10.1007\/s11845-023-03511-6","article-title":"Survey of laboratory medicine\u2019s national response to the HSE cyberattack in the Republic of Ireland","volume":"193","author":"Duffy","journal-title":"Ir J Med Sci"},{"issue":"4","key":"R94","doi-asserted-by":"publisher","first-page":"171","DOI":"10.1097\/PCR.0000000000000519","article-title":"Surviving a cyberattack in anatomic pathology: disaster response and creation of an incident command system","volume":"27","author":"Stowman","journal-title":"AJSP Rev Rep"},{"issue":"4","key":"R95","doi-asserted-by":"publisher","first-page":"1095","DOI":"10.1016\/j.injury.2023.02.022","article-title":"The crippling effects of a cyberattack at an academic level 1 trauma center: an orthopedic perspective","volume":"54","author":"Tarka","journal-title":"Injury"},{"issue":"7","key":"R96","doi-asserted-by":"publisher","DOI":"10.7759\/cureus.26944","article-title":"The effect of the 2021 Irish cyber-attack on otolaryngology outpatient non-attendance at a model 4 hospital in the post-COVID era","volume":"14","author":"Slattery","journal-title":"Cureus"},{"issue":"9","key":"R97","doi-asserted-by":"publisher","first-page":"1763","DOI":"10.1097\/CORR.0000000000002643","article-title":"The Irish national orthopaedic register under cyberattack: what happened, and what were the consequences?","volume":"481","author":"Russell","journal-title":"Clin Orthop Relat Res"},{"issue":"1","key":"R98","doi-asserted-by":"publisher","first-page":"92","DOI":"10.1177\/20438869241279443","article-title":"When healthcare becomes sick: recovering from ransomware","volume":"16","author":"Mashinchi","journal-title":"J Inf Technol Teach Cases"},{"issue":"3","key":"R99","doi-asserted-by":"publisher","DOI":"10.1111\/1475-6773.14439","article-title":"Impacts of hospital data breach on healthcare quality","volume":"60","author":"Chen","journal-title":"Health Serv Res"},{"issue":"7","key":"R100","doi-asserted-by":"publisher","first-page":"100879","DOI":"10.1016\/j.landig.2025.100879","article-title":"Overlooked and under-reported: the impact of cyberattacks on primary care in the UK National Health Service","volume":"7","author":"Rajput","journal-title":"Lancet Digit Health"},{"issue":"4","key":"R101","doi-asserted-by":"publisher","DOI":"10.1016\/j.jamcollsurg.2018.07.351","article-title":"Surgical interprofessional communication during a hospital ransomware attack","volume":"227","author":"Zhao","journal-title":"J Am Coll Surg"},{"key":"R102","unstructured":"Dexcom G7 continuous glucose monitoring system. Dexcom, Inc. 2024. URL: https:\/\/www.dexcom.com\/en-us\/g7-cgm-system [Accessed 24-08-2026]"},{"key":"R103","unstructured":"Alder S . Lehigh valley health network data breach lawsuit settled for $65 million. The HIPAA Journal. 2024. URL: https:\/\/www.hipaajournal.com\/lehigh-valley-health-network-blackcat-settlement\/ [Accessed 12-09-2024]"},{"key":"R104","unstructured":"Vastaamo hack: therapy notes hacker jailed for blackmail. BBC News. 2024. URL: https:\/\/www.bbc.com\/news\/articles\/c97znd00q7mo [Accessed 24-08-2026]"},{"issue":"1","key":"R105","doi-asserted-by":"publisher","first-page":"167","DOI":"10.1146\/annurev.publhealth.27.021405.102103","article-title":"Health disparities and health equity: concepts and measurement","volume":"27","author":"Braveman","journal-title":"Annu Rev Public Health"},{"issue":"3","key":"R106","doi-asserted-by":"publisher","first-page":"2161","DOI":"10.1007\/s40615-025-02407-8","article-title":"Association between patient race\/ethnicity, health literacy, socio-economic status, and incidence of medication errors: a systematic review","volume":"13","author":"Suen","journal-title":"J Racial Ethn Health Disparities"}],"container-title":["Journal of Medical Internet Research"],"original-title":[],"language":"en","deposited":{"date-parts":[[2026,9,29]],"date-time":"2026-09-29T15:53:29Z","timestamp":1790697209000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.jmir.org\/2026\/1\/e88257"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9,28]]},"references-count":106,"URL":"https:\/\/doi.org\/10.2196\/88257","relation":{},"ISSN":["1438-8871"],"issn-type":[{"value":"1438-8871","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,9,28]]},"article-number":"v28i12e88257"}}