Crystal Run Healthcare of Middletown said its information technology is up and running again after a “system interruption” that impacted some of its services this month.

“The system interruption is over and patient care was never impacted,” said Amy Knapp, a spokesperson for Optum, Crystal Run’s owner, which itself is owned by United Healthcare. Optum stopped short of calling it a cyberattack, like those that hit almost 90 million people in the U.S. this year and hurt medical providers such as HealthAlliance Hospital in Kingston.

The news came as New York State rolled out draft rules this week that aim to safeguard hospitals from cyber threats. Under the rules, hospitals would have to establish a cybersecurity program, including a chief cybersecurity officer, and employ defensive techniques to protect themselves from unauthorized access or other malicious acts.

"Our interconnected world demands an interconnected defense against cyber-attacks, leveraging every resource available, especially at hospitals," Governor Kathy Hochul said in a statement. She called the proposal a “blueprint to ensure New York State stands ready and resilient in the face of cyber threats.”

The regulations would have a 60-day public comment period starting Dec. 6. If adopted, hospitals would have a year from the end of that period to comply with the rules. Hochul’s budget for the 2024 fiscal year includes $500 million for which health care facilities can apply to upgrade systems and comply with the new rules.

To find out if your local health organization has been subjected to a cyberattack, look it up on the government’s breach portal: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf