> JapanHacked_
[Contained][Severity: Critical][Ransomware]

Aichi Prefecture: its PCR test system was hit by ransomware and the attackers demanded Bitcoin

The server that manages PCR test data was hit by ransomware and became unusable. The prefecture refused to pay. No leak is confirmed.

Disclosed

2022-02-10

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. When staff started the PCR test system, English text appeared and the system was unusable. The message demanded Bitcoin in exchange for recovery and said the price would rise the later it was paid. [1] [2]

  2. It announced the case. The prefecture did not give in to the demand and temporarily shut down the server to block access. [1] [2]

Impact

The system held names, ages and test results of about 43,000 close contacts tested at public health centers. No leak is confirmed. Test data management continues from backup data. [1]

Timeline

  1. Detected 2022-02-05
  2. Disclosed 2022-02-10
  3. 5 days

Attack or cause

Method
[Ransomware]
Impact
[Service outage][Extortion]
Entry point
Unknown

Data exposed or at risk

[Name][Health data]

Organizations involved

Open in organization search

Sources

  1. [1][News]愛知県のPCR検査システムにサイバー攻撃　ビットコインを要求The Asahi Shimbun · 2022-02-10
  2. [2][News]「（身代金）要求には応じず」愛知県PCR検査システムにランサムウェア攻撃ScanNetSecurity · 2022-02-15 08:05