In a statement, the CHSF confirmed that the attack has made its computer network inaccessible. Popular French radio station Radio Monte-Carlo (RMC) said the attackers have demanded a ransom of $10 million. The cybercriminals have reportedly vowed not to unblock the hospital’s systems and leak patients’ medical data if this demand isn’t met. It has now been over 24 hours since the incident, and the hospital’s systems appear to still be offline. As a result, major surgical procedures scheduled for Monday have been postponed, RMC said. Meanwhile, the hospital continues to operate, with medics resorting to using pen and paper to take down medical records and other important information. Located in Corbeil-Essonnes, southeast of Paris, the CHSF has about a thousand beds, according to RMC.
Early Morning Ransomware Attack
At around 1 a.m. on Sunday, a devastating ransomware attack crippled the hospital’s computer systems, the CHSF said. The hackers reportedly sent a message in English, demanding a $10 million ransom. The attack triggered an emergency “white plan” as the hospital’s entire computer network remains inaccessible. All CHSF’s business software, storage systems, medical imaging systems, patient admissions systems, and automation systems have been compromised. The CHSF said it acted quickly to ensure the safety of patients. All patients depending on the CHSF’s technical systems have been referred to the other hospitals in the Isle of France. Patients brought to the emergency room are being diverted to the CHSF’s Maison Médical de Garde. The Paris prosecutor’s office (Le Parquet de Paris) has opened an investigation into the attack, according to Radio France International (RFI). The prosecutor’s office is reportedly working with the National Agency for Information Systems Security (ANSSI) and the French Gendarmerie’s cybercrime division (C3N) to identify the threat actors and secure the hospital’s systems. According to RFI, the ANSSI has been able to identify the type of ransomware used in the attack.
Ransomware Attacks on Medical Institutions
Ransomware attacks on medical institutions can lead to the loss of lives. Such attacks are becoming a frequent occurrence. Since the height of the Covid-19 crisis in 2020, several hospitals in France have been targeted by cybercriminals. In March, a similar attack affected the ChWapi hospital in Belgium, forcing the hospital to cancel all non-emergency operations. A ransomware attack on a US hospital in 2019 reportedly led to the death of a baby — this is believed to have been the first death directly caused by a ransomware attack. To learn more about ransomware attacks and how to protect your devices, check out our in-depth guide to ransomware.
