> JapanHacked_
[Investigating][Severity: Critical][Ransomware][Intrusion]

Naruto Yamakami Hospital: ransomware LockBit 2.0 broke in, leaving the electronic medical record and hospital LAN unusable

LockBit 2.0 broke in on June 19, leaving the medical record system and hospital LAN unusable. On June 20 it treated only returning outpatients.

Disclosed

2022-06-20

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. At about 17:40 the printers in the hospital printed a large number of English documents, PCs restarted and the medical record system became unusable. The hospital contacted the prefectural police and its system vendor, and the attack was identified as ransomware. [1] [2]

  2. It announced the case. Care for inpatients and residents continued almost as usual. Because reception and prescriptions were disrupted, outpatient treatment was limited to returning patients. Tokushima Prefecture also announced it the same day. [1] [2]

Impact

The electronic medical record and hospital LAN became unusable. The hospital is a 90-bed general hospital. Whether money was demanded and whether patient data leaked were unknown. Restoration from backup data was under way. [2]

Timeline

  1. Started, Detected 2022-06-19
  2. Disclosed 2022-06-20
  3. 1 days

Attack or cause

Method
[Ransomware][Intrusion]
Impact
[Service outage]
Entry point
Unknown

Data exposed or at risk

[Health data]

Organizations involved

Open in organization search

Sources

  1. [1][Official]令和4年6月20日 サイバー攻撃による被害について (第1報)Kyujinkai Medical Corporation · 2022-06-20
  2. [2][News]徳島・鳴門の病院にサイバー攻撃 電子カルテにアクセスできず:朝日新聞The Asahi Shimbun · 2022-06-20