Dozens of Romanian Hospitals Hit by Ransomware Attack
A ransomware attack has disrupted over a hundred healthcare facilities in Romania, affecting crucial services in children’s and emergency hospitals. The attack unfolded overnight on Monday, targeting a widely used medical information system. Cyber extortionists demanded a ransom of 3.5 Bitcoin, equivalent to over £130,000, to decrypt essential files that had been encrypted. The affected hospitals, including The Pitesti Paediatric Hospital, were primarily identified by the National Cyber Security Directorate (DNSC). As a precaution, 79 additional healthcare facilities were taken offline for investigations to determine potential impact.
The Romanian Ministry of Health has reported that the ransomware incident is under investigation, with IT specialists, including cybersecurity experts from DNSC, examining the attack. While officials have identified the type of malware employed in the attack, the responsible group remains unidentified. The ransom demand provides only an email address for communication.
One positive aspect is that most of the targeted hospitals have recent backups of data from the affected servers, potentially allowing for a relatively swift recovery. However, as a precautionary measure, dozens of hospitals have temporarily shut down internet-connected devices, which could impact not only booking and records but also critical machines such as MRI scanners.
The impact on patients is expected to be significant due to the disruption of essential services. Although recent data backups offer a path to recovery, the precautionary shutdown of internet-connected devices in multiple hospitals could lead to delays and challenges in providing timely healthcare services.
This incident highlights the persistent threat of ransomware attacks on critical infrastructure, emphasizing the importance of robust cybersecurity measures and rapid incident response strategies to mitigate the impact on essential services and patient care.
