"The actions of the cyber response center and hospital staff have been praised."
The Attack: A Nationwide Digital Blackout
In February 2024, a coordinated cyberattack struck over 100 hospitals in Romania, exploiting a vulnerability in a widely used medical software system. The assault forced a sudden, system-wide shutdown, bringing critical operations to a halt.
Medical staff were immediately forced to abandon digital records and revert to traditional pen-and-paper methods to continue treating patients amidst the chaos.
The Response: Disconnecting to Protect
Romania's National Cyber Security Directorate (DNSC) issued an urgent order for all affected hospitals to disconnect from the internet. This drastic measure was necessary to contain the intrusion and prevent the malware from spreading to other critical networks. Despite the severity of the breach, the coordinated response from the cyber response center and hospital personnel has been widely commended for its efficiency and calm under pressure.
The Bigger Picture: A Targeting Trend
This incident is not isolated. According to the FBI, healthcare has become the most targeted sector of critical national infrastructure. The reliance on legacy systems and the high value of patient data continue to make hospitals a primary target for ransomware and cyber extortion groups.