One person in Germany, who needed immediate treatment, ended up having to go to a more distant hospital, due to a ransomware attack.
On September 10, the University Hospital of Düsseldorf (UKD) in Germany was attacked by ransomware as the attackers took advantage of the vulnerability Citrix ADC CVE-2019-19781 .
By shutting down their computer systems, the hospital announced that planned and external treatments as well as emergency care cannot be performed. Those seeking emergency care were forced to move to more distant hospitals.
The hospital turned to police και σύμφωνα με τα γερμανικά μέσα ενημέρωσης, η αστυνομία ήλθε σε επαφή με τους χειριστές του ransomware, μέσω των οδηγιών του ransom note και τους ενημέρωσαν ότι ο στόχος ήταν ένα νοσοκομείο. Όπως φαίνεται από την σημείωση των λύτρων που υπήρχε στους κρυπτογραφημένους δίσκους του νοσοκομείου, το ransomware απευθυνόταν στο University Heinrich Heine, and not in the hospital itself.
Since the police contacted the blackmailers and explained to them that they encrypted a hospital, the ransomware operators withdrew the ransom demand and delivered a key decryption.
The hospital resumed its systems once it received the key, and investigations concluded that the data was most likely not stolen.
But until all this was done, a patient who rushed to the Dusseldorf hospital and needed immediate treatment was transferred to the most distant hospital, about 32 kilometers away, in Wuppertal, after the University Hospital Dusseldorf was unable to register emergency services. need.
This transfer delayed care for an hour, resulting in the patient losing his life. Following the death of the patient, the German prosecutor's office launched an investigation into whether this attack was responsible and whether there was homicide due to negligence.