The All India Institute of Medical Science (AIIMS) in New Delhi is looking forward to upgrading its ransomware protection following the recent hacking attacks that affected its servers. A multi-agency probe has been launched and Delhi Police has registered a case about the incident, which is considered to be the first major cyberattack on any medical database in India.

What was impacted?

According to sources, the hacking attacks at AIIMS were executed by exploiting weak anti-virus software and firewalls installed on systems. 
  • This enabled the attackers to take control of the systems and launch the ransomware. 
  • The hacked systems contained confidential information as well as new research and development. 
  • Due to the hacking attacks, the authorities could not procure the systems and several routine cares of patients were delayed. 
  • With the server being down, the outpatient and inpatient digital hospital services, including smart lab, billing, report generation, and appointment system were also affected.

What actions are being taken? 

Various government agencies are investigating the incident and supporting the medical firm in improving its ransomware protections and bringing back digital patient care services. 
  • Initial analysis from CERT-In revealed that four servers including one backup server were infected in the hacking attack. 
  • Moreover, it was also found that no measures were implemented to secure the network and the institutions had no policies defined on the available firewall. 
  • Backups of the hospital database and the Laboratory Information System database have been taken on external hard drives.
Cyware Publisher

Publisher

Cyware