Second Cyber Attack Strikes Israeli Medical Facility in a Month - Kfar Shaul Hospital

In another alarming incident of cyber insecurity plaguing the Israeli healthcare sector, Kfar Shaul Itanim Hospital in Jerusalem has fallen victim to a suspected ransomware attack, marking the second such assault on a medical organization in just over a month.

Details: The Ministry of Health, responsible for monitoring and safeguarding public health, issued an update on Tuesday confirming the cyber incident at the mental health facility. Sources close to the matter have indicated that this attack appears to be a ransomware attack, prompting hospital authorities to issue directives for employees not to activate their computer stations. In response to the breach, the hospital has been compelled to transition to manual work procedures, disrupting its usual operations.

Kfar Shaul Itanim Hospital, situated in the Har Nof neighborhood of Jerusalem, continues to provide crucial mental health treatment services amidst the ongoing investigation led by the Ministry of Health's cyber team and the national cyber system. Currently, no additional specifics regarding the incident, including the extent of the attack and resultant damages, have been disclosed. Furthermore, no individual or organization has claimed responsibility for the cyber assault.

Ransomware Attack Explained: In a ransomware attack, malevolent actors encrypt access to a victim's computer system, effectively taking vital files hostage. To regain access to these files, victims are extorted into paying a ransom. In instances of double extortion ransomware, cybercriminals not only encrypt critical files but also pilfer information and employ it as leverage. Victims are then faced with two demands: one, to prevent the release of stolen data, and two, to decrypt the files.

Previous Attack: Last month, a hacker group identified as "Ragnar Locker" breached the computer systems of Ma'eini Hashu'a hospital in Bnei Brak. The group managed to steal a significant amount of sensitive information. The motive behind the attack is believed to be criminal in nature, as the attackers attempted to encrypt the hospital's computer systems without success. When their initial demands were not met, the group resorted to publishing sensitive medical and psychiatric information about the hospital's patients over the course of the last two weeks.

This latest incident underscores the pressing need for heightened cybersecurity measures within Israel's healthcare infrastructure, as authorities grapple with the evolving threat landscape of cyberattacks targeting critical institutions. The situation remains fluid as investigators work diligently to determine the full extent of the damage and identify those responsible for the breach.