
The day after the cyber attack on Shamir-Assaf Harofeh: The hospital and the Ministry of Health announced today (Friday) that initial tests indicate that information was leaked from emails sent to and from the hospital on September 25th.
Medical information contained in the said emails was also leaked.
Currently, there is no indication that the attack leaked information from the central medical information management system (the Chamilion) and investigations into this matter will continue. It was also clarified that, as reported yesterday, the attack did not affect the hospital's service and that all systems are accessible.
Yesterday, the Ministry of Health, the Medical Center, and the National Cyber Command announced that during Yom Kippur, a serious attempted cyber attack was detected and thwarted at Shamir Assaf Harofeh Hospital. According to the initial announcement, "the attack was thwarted in its early stages, but the possibility of information leakage by the various parties is being examined.".
The hospital initially claimed that the attempt was thwarted, but the hackers distributed leaked medical information.
The message from the attackers, who claimed to have stolen personal information, financial information, and resumes from the hospital, read: "If you make another mistake - you will be destroyed. Bye Bibi and Sarah.".
The hacker group, called Qilin, is known as an Eastern European Russian group that attacked several hospitals in London about a year ago. However, it is not possible to determine with certainty whether this is indeed their location.
Cyber experts say the group has been active for about 3 years and operates through ransomware attacks. This year alone, they have published the names of about 500 victims, operating using an encryption and ransom model.