Saitama Health Promotion Foundation: ransomware on its X-ray reading system puts checkup images at risk
On 31 January 2024 the Saitama Health Promotion Foundation, which runs health checkups for about 400,000 people a year in Saitama Prefecture, said its X-ray image reading system had been accessed without authorization on 29 January. According to the Saitama Shimbun, images and other data were encrypted, a ransom was demanded, and the ransomware was LockBit. The investigation found that personal data such as X-ray images taken from fiscal 2017 to 2023 in municipal cancer screening, workplace checkups, school checkups and tuberculosis contact checkups at public health centres may have leaked. No trace of a leak was found, but theft could not be ruled out. Saitama Prefecture said 9,388 of its staff and mutual aid members were affected, and Saitama City 3,208 people from tuberculosis checkups (chest X-rays with names, sex, exam dates and more).
Disclosed
2024-01-31
Organizations involved
3
Leaked or at risk
9.4K
9,388
Downtime
Unknown
Timeline
- Detected 2024-01-29
- Disclosed 2024-01-31
- 2 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Service outage][Data leak][Extortion]
- Entry point
- Unknown
- Actor
- LockBit Ransomware group · Attributed
Data exposed or at risk
Supply chain
- Organizations listed on this site
- 3
Organizations involved
[Through a supplier][Critical]Saitama, SaitamaMunicipality3,208 leaked
Saitama CityPeople who took tuberculosis contact and follow-up checkups.
[Through a supplier][Critical]SaitamaPrefecture9,388 leaked
Saitama PrefecturePeople who took staff and mutual aid association checkups from fiscal 2017 to 2023.
[Breached][Critical]Saitama, YoshimiMedical care and welfare
Saitama Health Promotion Foundation
Sources
- [1][News]漏えいの可能性も…埼玉で年間40万人が健康診断する法人、サイバー攻撃され復旧未定 X線画像読影システム、画像など暗号化され身代金要求される ランサムウエアは「ロックビット」、今後はThe Saitama Shimbun · 2024-02-01
- [2][Official]当事業団の健康診断等を受診された皆様へSaitama Health Promotion Foundation · 2024-05-17
- [3][Official]職員・共済組合員対象の健康診断等業務委託先事業者への不正アクセスについてSaitama Prefecture · 2024-06-24
- [4][Official]業務委託先事業者への不正アクセスについてSaitama City