Officials said to fear some medical records lost forever in hospital cyberattack

Work to restore Hillel Yaffe’s systems could take weeks; multiple cyberattack attempts on Israeli hospitals thwarted over weekend

Hospital staff at Hillel Yaffe Medical Center log patient details with pen and paper, following a ransomware cyberattack, October 13, 2021. (Hillel Yaffe Medical Center)
Hospital staff at Hillel Yaffe Medical Center log patient details with pen and paper, following a ransomware cyberattack, October 13, 2021. (Hillel Yaffe Medical Center)

Officials fear that some medical records affected when the Hillel Yaffe Medical Center in Hadera was hit with a major ransomware cyberattack last week could be unrecoverable.

The Kan public broadcaster reported Sunday that it could take “days or weeks” to recover the hospital’s systems.

Earlier Sunday, the National Cyber Directorate and Health Ministry said in a joint statement that they were still working to restore Hillel Yaffe’s systems “gradually and securely, as soon as possible.”

Some non-urgent procedures were canceled as a result of the attack, but most of the hospital’s work is continuing, using alternative IT systems and pen and paper.

A ransomware attack involves breaking into an entity’s networks to encrypt its data, then demanding a ransom, typically paid via cryptocurrency in exchange for the digital key, to unlock it. As a government hospital, Hillel Yaffe was barred from paying any ransom, according to Channel 12 news.

Sunday’s joint statement said the ministry and directorate had thwarted a wave of attempted cyberattacks targeting Israeli hospitals and health centers over the weekend.

A ward at Hillel Yaffe Medical Center on October 14, 2021, as staff try to. manage without regular IT systems (courtesy of Hillel Yaffe Medical Center)

“Early assessments and a quick response from the directorate and staff on the ground halted the attempts and no damage was caused,” the joint statement said.

The directorate said nine hospitals and health institutions were targeted. It was not immediately clear what type of cyberattacks were attempted, or who may have been behind them.

The directorate and the Health Ministry also said that in recent days they have been acting to “strengthen the level of [cyber] protection while identifying new vulnerabilities” in the health sector.

Last week, the National Cyber Directorate issued a general warning to Israeli businesses to be aware of potential cyberattacks, as the country faced an uptick in hacking attempts.

New data released Thursday suggested that Israel was the country most affected by ransomware since 2020.

Last week, Microsoft said that it had identified a group of Iranian hackers using the tech giant’s products to target Israeli and American defense technology companies as well as firms running maritime shipping in the Middle East.

Separately, Google warned of a surge in state-backed hackers, with a report focusing on the “notable campaigns” of a group linked to Iran’s Revolutionary Guard Corps.

Numerous suspected Iranian cyberattacks on Israel were reported in recent years, including one that targeted its water infrastructure in 2020. Israel and Iran have been engaged in a years-long shadow war, with Israel allegedly directing most of its efforts — including multiple suspected cyberattacks — at sabotaging the Islamic Republic’s nuclear program.

However, Kan reported Sunday that investigators believe that the hospital attacks were criminal and not security-related.

In this October 8, 2019 file photo, a woman types on a keyboard in New York. (AP Photo/Jenny Kane, File)

In July, cybersecurity firm Check Point reported that Israeli institutions are targeted by about twice as many cyberattacks as the average in other countries around the world, particularly the country’s health sector, which experiences an average of 1,443 attacks a week.

The most targeted sectors around the world, including in Israel, are education and research, followed by government and security organizations, and then health institutions, Check Point said. The report found that, on average, one in every 60 Israeli organizations or firms is targeted every week with ransomware attacks, an increase of 30% over the rate in 2020.

Agencies contributed to this report.

read more:
Never miss breaking news on Israel
Get notifications to stay updated
You're subscribed