{"id":13665,"date":"2020-03-14T04:16:30","date_gmt":"2020-03-14T03:16:30","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=13665"},"modified":"2020-10-23T17:49:03","modified_gmt":"2020-10-23T15:49:03","slug":"ransomware-infection-in-czech-university-hospital-of-brno","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2020\/03\/14\/ransomware-infection-in-czech-university-hospital-of-brno\/","title":{"rendered":"Ransomware infection in Czech University Hospital of Brno"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2015\/01\/Schutz.jpg\" width=\"40\" height=\"47\" align=\"left\" \/>[<a href=\"https:\/\/www.borncity.com\/blog\/2020\/03\/14\/ransomware-befall-in-uniklinik-von-brno-brnn-tschechien\/\" target=\"_blank\" rel=\"noopener noreferrer\">German<\/a>]The university hospital of the Czech city of Brno (German: Br\u00fcnn) is currently suffering from an attack by ransomware. The clinic runs one of the largest laboratories for testing for Covid-19 infections.<\/p>\n<p><!--more--><\/p>\n<p>I already became aware of the case in our neighbouring country a few hours ago through a tweet from Catalin Cimpanu.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">I've update the article with more information about the incident.<\/p>\n<p>&#8211; Infection was discovered at 5am in the morning<br \/>\n&#8211; Hospital warned staff via the public speaker system to shut down PCs<br \/>\n&#8211; Message blared for 30 minutes<br \/>\n&#8211; Everything was down by 8am and surgeries canceled<\/p>\n<p>\u2014 Catalin Cimpanu (@campuscodi) <a href=\"https:\/\/twitter.com\/campuscodi\/status\/1238575783599312898?ref_src=twsrc%5Etfw\">March 13, 2020<\/a><\/p><\/blockquote>\n<p><span id=\"preservea2a21f5b15b84e50a15c1a3e068fffe9\" class=\"wlWriterPreserve\"><script src=\"https:\/\/platform.twitter.com\/widgets.js\" async=\"\" charset=\"utf-8\"><\/script><\/span><\/p>\n<p>The ransomware infection started at 2 a.m. and was probably discovered on Friday, March 13, 2020 at 5 am. Peter Gramatik, a security researcher at Sucuri, happened to be a patient at this clinic and witnessed the whole thing. He was then sent home from the clinic and reported some details via email to ZDNet.<\/p>\n<p>Catalin Cimpanu <a href=\"https:\/\/www.zdnet.com\/article\/czech-hospital-hit-by-cyber-attack-while-in-the-midst-of-a-covid-19-outbreak\/\" target=\"_blank\" rel=\"noopener noreferrer\">writes on ZDNet<\/a> that the clinic had to shut down the entire IT network as a result of the infection. Two other branches of the hospital, the children's hospital and the maternity clinics, were also affected.<\/p>\n<p>Gramatik informed ZDNet in his email that the hospital immediately made loudspeaker announcements to all staff, that all computers had to be shut down immediately for security reasons. This message was repeated as every 30 minutes. Then at about 8 a.m. all operations were cancelled by another public announcement over the hospital's public address system. Gramatik was then sent home.<\/p>\n<p>Following the outbreak of the incident, teams from the Czech National Cyber Security Centre (NCSC), the Czech Police (NCOZ) and hospital IT staff are now working together on site to restore the hospital's IT network.<\/p>\n<p>The incident is considered serious and will be treated with the utmost urgency as the University Hospital Brno is one of the largest COVID 19 testing laboratories in the Czech Republic. It is currently unclear whether laboratory activities regarding coronavirus testing have been\/are affected by the cyber attack. So far the incident has not been officially confirmed by the clinic &#8211; which ransomware it is. <a href=\"https:\/\/twitter.com\/BrnoDaily\/status\/1238388113325674497\" target=\"_blank\" rel=\"noopener noreferrer\">This tweet states<\/a> that the incident has been confirmed by the Prime Minister.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">Some scheduled operations have been cancelled as other hospitals in the area prepare to accept more acute cases than usual. Preparations are also underway to transfer the hospital's coronavirus response capacity to other hospitals.<a href=\"https:\/\/t.co\/qig1xYH2UN\">https:\/\/t.co\/qig1xYH2UN<\/a><\/p>\n<p>\u2014 Brno Daily (@BrnoDaily) <a href=\"https:\/\/twitter.com\/BrnoDaily\/status\/1238431465496608774?ref_src=twsrc%5Etfw\">March 13, 2020<\/a><\/p><\/blockquote>\n<p><span id=\"preservef909f16d4ce94b539ba88fe8fc1cf360\" class=\"wlWriterPreserve\"><script src=\"https:\/\/platform.twitter.com\/widgets.js\" async=\"\" charset=\"utf-8\"><\/script><\/span><\/p>\n<p>The article linked in the above tweet still contains some information. So the attack already started at 2am. The patients of the clinic were partly distributed to other hospitals in the city.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]The university hospital of the Czech city of Brno (German: Br\u00fcnn) is currently suffering from an attack by ransomware. The clinic runs one of the largest laboratories for testing for Covid-19 infections.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580],"tags":[2335,2332,2334,243,69,2333],"class_list":["post-13665","post","type-post","status-publish","format-standard","hentry","category-security","tag-brno","tag-czech","tag-hospital","tag-ransomware","tag-security","tag-university"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/13665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=13665"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/13665\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=13665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=13665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=13665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}