According to reports, a ransomware attack on more than 20 Bucharest hospitals resulted from cybercriminals targeting an IT service provider. As a result, medical professionals are now required to use pen and paper rather than computers.
The Backmydata ransomware, a subset of Phobos, was used by the attackers to encrypted hospital data, according to the National Cybersecurity Directorate ( DNSC ) of Romania.
In order for the IT teams at the affected hospitals to concentrate on restoring IT services and data, the DNSC advises against getting in touch with them. Right now, this is of utmost importance.
The Romanian software company RSC created the Hipocrate IT platform, which was used by all of the affected hospitals to manage patient data and monitor their progression from admission to discharge.
Hospitals that are impacted include:
- Hospital for Orthopaedics and Traumatology Azuga
- Hospital in Băicoi City
- Emergency Hospital in Buzău County
- No. C. F. Clinical Hospital Bucharest, 2
- Clinical Hospital Colțea
- Dr. Constantin Opriescu of the Emergency County Hospital in Baia Mare
- Bucharest Emergency Hospital for Plastic, Reconstructive, and Burn Surgery
- Clinical Institute Fundeni
- Chronic Diseases Hospital Sf. Luca.
- Timișoara Institute of Cardiovascular Diseases
- Municipal Hospital of Medgidia
- Moinești Medical Center MALP SRL
- Dr. Alexandru Gafencu, Military Emergency Hospital, Constanta
- Professor Dr. Al. of the Oncological Institute Institute Bucharest ( IOB )” Trestioreanu”
- Hospital in Pitești Emergency County
- Iasi Regional Institute of Oncology ( IRO Iasi )
- Municipal hospital Sighetu Marmației
- Emergency Hospital in Slobozia County
- Constanta St. Apostol Andrei Emergency County Hospital
- Emergency Hospital in Târgovişte County
According to the DNSC, 79 additional hospitals that were using Hipocrate stopped using the internet after the attack. At the Pitești Paediatric Hospital on Saturday, February 10, the attack was first noticed.
The majority of hospitals affected by the DNSC have backups of the ransomware-encrypted data, which should speed up recovery. The most recent backup was, however, saved 12 days ago in at least one instance.
Hat tip: I appreciate reader Gheorghe’s help with this article.