Okayama Psychiatric Medical Center: ransomware leaks data of up to about 40,000 patients

On 20 May 2024 Okayama Psychiatric Medical Center said its integrated information system, including electronic medical records at the center and its Higashi-Furumatsu clinic, had failed from about 4 p.m. the day before; on 21 May it identified a cyberattack that appeared to be ransomware as the cause. It kept treating patients with paper records. On 11 June, after contact from the prefectural police, it said patient data in a shared folder (names, addresses, birth dates, diagnoses, up to about 40,000 people) and other files had leaked. Its investigation report, published on 13 February 2025, says the first intrusion was on 13 May through an SSL-VPN device used for maintenance, and that guessable IDs and passwords reused across machines widened the damage. The center did not negotiate a ransom and restored its systems itself.