> JapanHacked_
[Contained][Severity: Critical][Ransomware]

Saitama Health Promotion Foundation: ransomware on its X-ray reading system puts checkup images at risk

On 31 January 2024 the Saitama Health Promotion Foundation, which runs health checkups for about 400,000 people a year in Saitama Prefecture, said its X-ray image reading system had been accessed without authorization on 29 January. According to the Saitama Shimbun, images and other data were encrypted, a ransom was demanded, and the ransomware was LockBit. The investigation found that personal data such as X-ray images taken from fiscal 2017 to 2023 in municipal cancer screening, workplace checkups, school checkups and tuberculosis contact checkups at public health centres may have leaked. No trace of a leak was found, but theft could not be ruled out. Saitama Prefecture said 9,388 of its staff and mutual aid members were affected, and Saitama City 3,208 people from tuberculosis checkups (chest X-rays with names, sex, exam dates and more).

Disclosed

2024-01-31

Organizations involved

3

Leaked or at risk

9.4K

9,388

Downtime

Unknown

Timeline

  1. Detected 2024-01-29
  2. Disclosed 2024-01-31
  3. 2 days

Attack or cause

Method
[Ransomware]
Impact
[Service outage][Data leak][Extortion]
Entry point
Unknown
Actor
LockBit Ransomware group · Attributed

Data exposed or at risk

[Name][Gender][Health data]

Supply chain

Organizations involved

Open in organization search

Sources

  1. [1][News]漏えいの可能性も…埼玉で年間40万人が健康診断する法人、サイバー攻撃され復旧未定 X線画像読影システム、画像など暗号化され身代金要求される ランサムウエアは「ロックビット」、今後はThe Saitama Shimbun · 2024-02-01
  2. [2][Official]当事業団の健康診断等を受診された皆様へSaitama Health Promotion Foundation · 2024-05-17
  3. [3][Official]職員・共済組合員対象の健康診断等業務委託先事業者への不正アクセスについてSaitama Prefecture · 2024-06-24
  4. [4][Official]業務委託先事業者への不正アクセスについてSaitama City