> JapanHacked_
[Investigating][Severity: Critical][Intrusion]

Higashiosaka City Medical Center: its medical imaging system was accessed without authorization and went down, and images from before the failure remained unviewable

The imaging viewer system went down after unauthorized access. A temporary server restored it, but earlier images stay unviewable.

Disclosed

2021-06-22

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. In the early hours, the system for viewing medical images, connected to the hospital network, went down. [1] [2]

  2. An investigation with the system vendor and an outside security firm found unauthorized access to be the cause, and it reported the damage to the police. [1] [2]

Impact

The system was restarted on a temporary server and images taken after the restart became viewable for treatment. Image data from before the failure was still unviewable as of June 23, with no prospect of recovery. The number of images concerned was being identified, and whether the attacker made any demand was under investigation and not disclosed. [1]

Timeline

  1. Detected 2021-05-31
  2. Disclosed 2021-06-22
  3. 22 days

Attack or cause

Method
[Intrusion]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]医療システムに不正アクセス、撮影画像が閲覧不能に - 市立東大阪医療センターSecurity NEXT · 2021-06-23
  2. [2][News]不正アクセスで医用画像参照システムがダウン、発生 3 週間 一部の画像閲覧できない状況続くScanNetSecurity · 2021-06-25 08:00