Pull to refresh
Logo
Fenway Health systems remain offline, cause unconfirmed

Fenway Health systems remain offline, cause unconfirmed

Force in Play Boston, MA local

Boston's largest LGBTQIA+ health provider shifts care to virtual as outside experts work to restore systems

Today: Outage continues; outside experts engaged

Overview

Updated 2 hours ago

Fenway Health's computer systems went dark on Friday. By Sunday, patients still couldn't refill prescriptions, at least one clinic was cancelled, and in-person appointments were being shifted to virtual.

The cause is unconfirmed, but one patient openly wondered whether it matched a recent incident in Springfield and joked about Iranian hackers. Fenway Health is one of Boston's largest LGBTQIA+ providers, serving thousands who depend on it for HIV treatment, PrEP, and other ongoing care.

Why it matters

A multi-day outage at Boston's biggest LGBTQIA+ health provider disrupts HIV care and prescriptions, and may signal another healthcare cyberattack.

Questions about this story

Free account needed to ask — your question is kept and asked for you right after sign-up. Answers are public.

No questions yet — be the first to ask.

Key Indicators

3
Days systems offline as of Sept 13
Computer systems went down Friday and remained down through Sunday.
1
In-person clinics cancelled
At least one clinic was cancelled because of the outage.
$11M
Average cost of a healthcare data breach
IBM's 2023 report found healthcare breaches cost $11 million on average, the most of any industry.

Voices

Curated perspectives — historical figures and your fellow readers.

Ever wondered what historical figures would say about today's headlines?

Sign up to generate historical perspectives on this story.

People Involved

Organizations Involved

Timeline

2 events Latest: Today
  1. Outage continues; outside experts engaged

    Today Update

    Systems remain offline for a third day. Spokesman Ryan Dunn confirms an IT interruption and says external experts are working toward restoration; at least one clinic was cancelled. Cause and ETA undisclosed.

  2. Fenway Health computer systems go offline

    Incident

    Systems went down, forcing appointments to virtual and disrupting prescription refills. Patient Drew Starr publicly flags the outage and speculates about a cyberattack.

Scenarios

1

Cyberattack confirmed, patient data stolen

Possible Resolves by Nov 15, 2026

Discussed by: Drew Starr (patient speculation) and Errol Weiss of Health ISAC, who warns of sustained attacks on healthcare

Outside forensic experts and federal agencies conclude the outage was a ransomware or data-theft attack. Fenway notifies patients, the Massachusetts attorney general, and the Department of Health and Human Services. Systems may take weeks to restore, extending care disruptions.

2

Technical failure identified, systems restored

Possible Resolves by Oct 15, 2026

Discussed by: Fenway Health, which has described an 'interruption to IT systems' without accusing attackers

Experts trace the outage to a hardware, software, or network failure rather than an attack. Systems return over the coming days to weeks, and Fenway announces normal operations without mentioning a breach.

3

Systems restored, cause never fully disclosed

Possible Resolves by End of 2026

Discussed by: Health ISAC's Errol Weiss, who notes many healthcare incidents go undisclosed

Fenway restores systems but never publicly pins the outage on a specific cause, or law enforcement keeps details sealed. Care returns to normal while the incident fades from public view.

Historical Context

3 moments from history that rhyme with this story — and how they unfolded.

May 2017

WannaCry NHS attack (2017)

The WannaCry worm, using a leaked NSA exploit, hit Britain's National Health Service and encrypted systems at over a third of NHS trusts.

Then

Tens of thousands of appointments and operations were cancelled; many trusts reverted to paper records.

Now

Exposed how dependent healthcare is on unpatched systems and sparked a push for cyber resilience.

Why this matters now

Demonstrates the human cost when healthcare IT goes down, even briefly.

August 2023

Prospect Medical Holdings ransomware (2023)

Ransomware hit Prospect Medical Holdings, taking down systems at 16 hospitals and dozens of clinics across six states. Some emergency rooms closed and ambulances were diverted.

Then

Critical systems stayed offline more than two weeks; staff reverted to paper records and manual monitoring.

Now

Set a benchmark that healthcare recovery from ransomware routinely takes weeks, not days.

Why this matters now

Illustrates that Fenway's restoration timeline could stretch well beyond days if this turns out to be ransomware.

February 2024

Change Healthcare ransomware (2024)

The ALPHV/BlackCat ransomware group breached Change Healthcare, UnitedHealth's billing and claims processing arm that handled roughly 15 billion transactions a year. The outage froze prescriptions and payments at thousands of pharmacies nationwide for weeks.

Then

Prescription processing was down for over a week at many pharmacies; UnitedHealth paid a $22 million ransom.

Now

The breach exposed data on a large share of American patients and triggered federal scrutiny of healthcare cybersecurity.

Why this matters now

Shows how one healthcare IT outage can freeze prescriptions for days, the same problem Fenway patients now face.

Sources

(4)