Hollywood Presbyterian Medical Center paid $17K ransom in bitcoins to hackers who took over its network for more than a week
Hollywood hospital pays $17,000 in bitcoins to hackers who took control of computers — The Hollywood Presbyterian Medical Center in 2004.
Context & Ripple Effects
Two days ago, Hollywood Presbyterian's network had already been down for more than a week with hackers demanding $3.6 million; today the hospital confirms it settled for $17,000 in bitcoin to get its systems back. That gap between ask and payment is the first data point in what becomes a defining arc for healthcare IT.
The corpus shows where this leads: UK hospitals diverting emergency patients during a mass ransomware outbreak in 2017, UCSF paying roughly $1.14M in 2020 mid-COVID-vaccine research, a German patient death after a diverted admission, and Colonial paying ~$5M only to fall back on its own backups when the decryptor proved too slow.
First-order effects
- Hollywood Presbyterian regains use of its computers after more than a week of outage, paying about $17,000 against a stated $3.6M demand — staff and patients who endured paper-based operations get their systems back.
- The payment confirms to attackers that hospitals will pay quickly rather than endure prolonged downtime, making the medical center's outage a proof-of-concept for healthcare extortion.
Second-order effects
- Rivals in the attacker economy escalate targets and asks: four years later UCSF pays roughly $1.14M in bitcoin under the pressure of ongoing vaccine research, showing the price floor set here did not hold.
- Hospitals face a forced operational choice between paying and diverting patients — the UK outbreak and the German case show diversion is the default fallback, pushing emergency-care continuity into hospital risk planning.
Third-order effects
- If the pattern holds, healthcare becomes a structurally targeted sector where ransom payment is treated as a budgeted contingency rather than an anomaly — Colonial's experience that even a ~$5M payment came with a broken decryptor suggests backups, not payment, end up as the real recovery path.
- Patient-harm outcomes like the German death create the conditions for regulatory intervention in hospital cyber-preparedness, shifting ransomware from an IT problem to a patient-safety mandate.
The trend: Healthcare is becoming ransomware's most reliable target class, with payments escalating from Hollywood Presbyterian's $17,000 to seven-figure sums as attackers learn downtime is clinically intolerable.