INDIANAPOLIS — An Indiana hospital said it paid Attack.Ransom a $ 50,000 ransom Attack.Ransom to hackers who hijacked patient data . The ransomware attack Attack.Ransom accessed the computers of Hancock Health in Greenfield through an outside vendor 's account Thursday . It quickly infected the system by locking out data and changing the names of more than 1,400 files to `` I 'm sorry . '' The virus demanded Attack.Ransom four bitcoins in exchange for unlocking the data , which included patient medical records and company emails . The hospital paid Attack.Ransom the amount , about $ 50,000 at the time , early Saturday morning , said Rob Matt , senior vice president and chief strategy officer . `` It was n't an easy decision , '' Matt said . `` When you weigh the cost of delivering high-quality care ... versus not paying and bearing the consequences of a new system . '' The data started unlocking soon after the money was transferred , Matt said . `` The amount of the ransom Attack.Ransom was reasonable in respect to the cost of continuing down time and not being able to care for patients , '' Matt said . Hancock Health includes about two dozen health care facilities , including Hancock Regional Hospital in Greenfield , about 15 miles east of Indianapolis . The health system said in a news release that patient data was not compromised Attack.Databreach . Life support and other critical hospital services were not affected , and patient safety was never at risk . Ransomware is a growing digital extortion technique that affected tens of thousands of Americans in 2016 , USA TODAY reported . Criminals use various phishing methods Attack.Phishing through emails or bogus links to infect victims with malicious software . The virus infects the computer network by encrypting files or locking down the entire system . Victims log on and receive a message telling them the files have been hijacked and to get the files back they will have to pay Attack.Ransom . Hospitals are a frequent target of these attacks . In May , a ransomware virus affected more than 200,000 victims in 150 countries , including more than 20 % of hospitals in the United Kingdom . That attack was later traced to North Korea . Hancock Health said it worked with the FBI and hired an Indianapolis cybersecurity expert for advice on how to respond to the attack . The systems were back Monday after paying the ransom Attack.Ransom . “ We were in a very precarious situation at the time of the attack , '' Hancock Health CEO Steve Long said in a statement . `` With the ice and snowstorm at hand , coupled with the one of the worst flu seasons in memory , we wanted to recover our systems in the quickest way possible . '' Hospital officials could have retrieved back up files , but Long said they feared restoring the hijacked data would take too long . `` We made the deliberate decision , ” Long said , `` to pay the ransom Attack.Ransom to expedite our return to full operations . ''

Nearly a week after it became the target of one of the largest ransomware attacks Attack.Ransom to date , the City of Atlanta has made progress toward recovery , but it is still far from business as usual . Hackers encrypted many of the city government 's vital data and computer systems . The ransomware attack Attack.Ransom , which Mayor Keisha Lance Bottoms characterized as `` a hostage situation , '' forced the city to shut down municipal courts and even prevented residents from paying bills online . The city has been unable to issue warrants , and in many cases city employees have had to fill out forms and reports by hand . The hackers demanded Attack.Ransom that officials pay a ransom Attack.Ransom of US $ 51,000 to be sent to a bitcoin wallet . Threat researchers from Dell-owned Secureworks , which is based in Atlanta , have been working to help the city recover from the attack . The security firm identified the assailants as the SamSam hacking group , The New York Times reported on Thursday . That organization has been known for similar ransomware attacks Attack.Ransom ; it typically makes ransom demands Attack.Ransom of $ 50,000 or more , usually payable only with bitcoin . Secureworks has been working with the city 's incident response team as well as the FBI , the Department of Homeland Security and the U.S. Secret Service . In addition , a number of independent experts , including researchers from Georgia Tech , have been called in to determine how the attack occurred and help strategize to prevent another such attack . As of Thursday , the city 's Department of Information Management , which first discovered the attack on March 21 , said that it had found no evidence that customer or employee data was compromised Attack.Databreach . It nevertheless encouraged everyone to take precautionary measures , including the monitoring of personal accounts and protecting personal information .