Report: German hospital cyberattack trail leads to Russia
German media are reporting that IT experts investigating a cyberattack that paralyzed computer systems at a major hospital in western Germany say one of the trails they are following leads to Russia
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.IT experts investigating a cyberattack that paralyzed computer systems at a major hospital in western Germany say one of the trails they are following leads to Russia, German media reported Tuesday.
The attack caused the failure of IT systems at Duesseldorf's University Hospital two weeks ago. A woman who needed urgent admission died after she had to be taken to another city for treatment.
Authorities in North Rhine-Westphalia told state lawmakers that the software used to encrypt computer systems in an apparent ransom attempt originates with a Russian hacker group, public broadcaster WDR reported.
WDR quoted investigators as saying that the attack “may have been part of a worldwide, commercial malware campaign.” Authorities previously said the attackers exploited a weak spot in “widely used commercial add-on software,” which they didn't identify.
The attackers appeared to have intended to target the Heinrich Heine University, to which the Duesseldorf hospital is affiliated, and not the hospital itself. When Duesseldorf police established contact and said the hospital, and not the university, had been affected, endangering patients, the perpetrators withdrew their extortion attempt and provided a digital key to decrypt the data.