The CHwapi hospital in Belgium is suffering from a cyberattack where threat actors claim to have encrypted 40 servers and 100 TB of data using Windows Bitlocker.
On Sunday, CHwapi suffered an attack that caused the hospital to redirect patients to other hospitals and delay surgical procedures.
While the hospital's services are slowly recovering and surgical operations have resumed, CHwapi continues to cancel some services and redirect urgent cases to other hospitals.
- Information sessions for future parents on January 20 and 21 are canceled. - The consultations are maintained; - Surgical operations resumed this Wednesday, January 20; - Patient data has not been compromised; - The distribution circuit of Covid vaccines in MR / MRS is not disrupted; - For the moment, the CHwapi no longer receives urgent cases sent by service 100. Patients are redirected to other hospitals.
According to Belgium media L'Avenir , CHwapi was attacked on Sunday at 8:46 PM when attackers encrypted 80 out of 300 servers, but the hospital did not receive a ransom demand.
If you have first-hand information about this or other unreported cyberattacks, you can confidentially contact us on Signal at +16469613731 or on Wire at @lawrenceabrams-bc.
Threat actors claim to use Windows BitLocker
On Tuesday, BleepingComputer was contacted by threat actors who state that they were responsible for the attack on CHwapi.
According to the attackers, they used Windows BitLocker to encrypt 40 servers and 100TB of data. After encrypting devices, the attackers state they left ransom notes named ransom.txt on the domain controllers and backup servers.
Support the originator by clicking the read the rest link below.
