FBI

What do you mean?

You said you were gonna ask her on Friday.

- I was. I just--

- You chickened out? - No.

- Did you chicken out? - I just--

Homecoming's in November.

I mean, who knows how I'll be around then?

November? You'll be fine.

Come on, this is your first high school dance.

It's a big deal, man.

- Yeah. Yeah, I guess so.

It's hard to think about the future sometimes, you know,

'cause--cancer.

- Yeah. Yeah, I know.

I know--I know how hard it is to stay--stay positive.

But you have to just keep reminding yourself

the doctors are very optimistic.

In a few months, when the chemo's finished,

it'll be like it never happened.

Believe it.

- When can I go home? - Couple days.

They just want to keep an eye on you,

to make sure the infection goes away.

You'll be home before you know it.

- Yeah, I hope so. These fries suck.

- Do they? Are they soggy?

- Mushy. - I hate soggy fries.

What was that?

- I don't know. Probably just a power surge.

I'll be right back.

You want some candy from the vending machine?

But Mom doesn't like me--

- I won't tell her if you don't.

I'll pick you out something good.

- What is going on? Is it the power?

- I'm not sure. Excuse me.

Everything--everything all right?

- Everything's fine. We just had a bit

of a technical glitch.

- Uh-huh. Ma'am?

- Sir, please go back to your child's room.

I'm with the FBI.

Can you tell me what's really going on, please?

- We're locked out of the system.

We're running on generators.

Our automated care systems have shut down, and--

- I'll take it from here. Stand by. Thank you.

Hey, Rina, it's me. We got a problem.

New York Children's Hospital

just got hit with a cyberattack.

All right, listen up.

New York Children's Hospital

was hacked at 11:48 this morning.

They're locked out of patient records

and treatment plans.

Most of their equipment is down too.

That means no oxygen pumps, no defibrillators,

no monitoring devices. They're having to go analog,

which requires more time and staff than they currently have.

- There are 500 kids receiving in-patient care

at Children's Hospital,

and they are all at risk until we can resolve this.

- The software that took down the hospital system

is a form of malware.

All of the computers are frozen,

"You have been locked out of this system.

Await further instructions."

- We treat cyberattacks just like kidnappings.

Find the motive.

Use it to track the hacker down.

I want you to dig into Children's Hospital,

see if there have been any threats.

Tiffany and Scola, coordinate with FDNY and Public Health.

I want you to oversee patient transfers on our end.

Ian, head to the hospital with Maggie and OA.

See if you can track down the origin of the attack.

- Hey. Just got off the phone with Jubal.

He's gonna run point from the hospital.

- Okay, but he is there with his son.

He's a patient. It might complicate things.

He'll be fine.

Everything's automated.

If we don't have power, if our systems are down--

You must have backup files.

- We do, but if the generators go down,

we won't have access to that either.

- Wait, how long will the generators run for?

- They're only built to last 48 hours.

- We're trying to find backups, but for a facility this large,

they're saying it will take three days to put into place,

so we need to resolve this quickly.

Yeah, well, that's the goal.

Well, how can I help?

- First, for starters, we need to establish

how much you'd be willing to pay,

if they demand a ransom.

- I haven't thought about it, but I'm pretty sure

we pay whatever they're asking.

I mean, we don't have much of a choice.

- Okay, good. You need to start talking

to your financial people and your lawyers.

- Okay, I'm sorry, I really--I have to go.

Okay.

- Hey. Come here.

You know we can't endorse ransom payments.

It's Bureau policy.

- Oh, yeah. No, I know. Of course. But got 48 hours,

so just in case it's our only play, right?

- Hey, Jubal, if this is too much for you--

you obviously have a lot on your mind.

- Yeah, but I'm good. I'm good.

I am. Okay?

- Yeah. If you--

if you need anything, you let me know, okay?

Yeah. I will.

- Hey. - Hey.

How's Tyler doing?

- Oh, he's hanging in there, all things considered.

- Okay. Ian's been running diagnostics on the hack.

Hospital runs on an air-gapped system.

That's important because--

- 'Cause it means that the hack had to come

from inside the hospital.

- And most likely uploaded onto this mainframe computer.

- Okay, so the hacker was here in this room.

That's good. You guys need to round up

and polygraph everyone in the hospital IT staff.

- We can't possibly polygraph everyone.

We're gonna need their consent.

Then get their consent.

If they refuse, we'll know they're a suspect.

Please. Thank you.

Hey, download all the security footage

from the hall outside this room.

Get it to the JOC ASAP.

We need to know who accessed the system.

Hey.

Patient transfers are almost complete.

That's the good news.

Okay. Bad news?

- The system is now flooded with patients,

and it'll be impossible to treat anyone

who needs medical assistance.

So please tell me we're making progress.

- All we know so far is it looks like an inside job.

Maggie and OA are interviewing hospital employees now,

pulling personnel files--

- I've been going through footage,

logging everyone who went into the hospital's control room

over the last few weeks.

It's mostly just been hospital administrators and IT staff,

except for this guy, Jason Cook,

33 years old, no connection to the hospital.

Guy works in an electronic store downtown.

Let's track him down.

-- 3 - D audio, haptic feedback,

and the graphic power's next level.

Awesome ray tracing on the games.

- Jason Cook? We're with the FBI.

Hey!

Come on.

I didn't do it!

- We haven't even accused you of anything yet, man.

- Jason Cook, you're coming with us.

Excuse me.

- I'm telling you, I don't know how to fix it.

Jason, drop the act.

We have you on video going into the hospital's control room.

We have your prints all over the mainframe, okay?

You're not gonna walk away from this one.

- We need these systems back online right now.

There are hundreds of kids who are sick.

They're scared. - I know,

but I don't know how to undo it.

I'm not a software guy.

- You're the one who put the program

on the hospital's computer in the first place.

- Yeah, but it's not my program.

- Okay, what do you mean? Whose is it?

- I don't know. Some guy I met in a chat room

- said he'd pay me 20 - K in Bitcoin

to take this rubber ducky and install it.

- Rubber ducky? - Yeah, like a USB.

You plug it in, it just starts writing code.

It seemed like easy money.

I didn't know what it was going to do.

- So, you just blindly put a virus on a hospital computer.

Where'd you get the USB?

- Guy dropped it off at my house.

Describe him.

- I don't know. I never met him.

He left it at my door.

- Okay, well, we're gonna need that USB and access

to your computer to verify all of this.

Fine. It's all there.

Messages, instructions for the hospitals.

Hospitals? Plural?

Jason, how many hospitals did you take this thing to?

Hey, Cook uploaded malware

onto six separate hospital mainframes around the city.