Three German hospitals suspend emergency care after a ransomware attack

Three hospitals in western Germany no longer offer emergency care after a ransomware attack. This may be a Lockbit 3.0 attack. The hospitals still have access to healthcare data and say they can provide current patients with medical care.

The IT systems of the three hospitals ‘failed’ in the morning of December 24, writes the organization behind the three hospitals. These include the Franziskus Hospital in Bielefeld, the Sankt Vinzenz Hospital in Rheda-Wiedenbrück and the Mathilden Hospital in Herford. The three hospitals are located in the state of North Rhine-Westphalia.

During the attack, the hackers gained access to the hospitals’ IT systems and encrypted data. Based on an ‘initial check’, the organization reports that it is probably Lockbit 3.0. It is not yet known how long the attackers had access to the IT systems, how they gained access and whether a ransom demand will be made.

The hospital organization KHO says it has informed the relevant authorities and is investigating the attack with internal and external cybersecurity specialists. The hospitals work with ‘minor technical limitations’, but medical care would continue. Due to ‘safety reasons’, hospitals no longer offer emergency care.