Ransomware Attacks on Czech Hospitals at Beginning of Covid-19 Crisis

Abstract

AbstractThe chapter describes cyber-attack at the Rudolph and Stephanie Regional Hospital in Benešov, authors’ analysis of the attack, situation in smaller hospitals, and calls for a minimal cyber security standard. The attack and its consequences are described, along with actions taken by the Czech National Cyber and Information Security Agency. The chapter provides a qualitative analysis of the attack and issued measures in smaller hospitals. The level of ICT throughout hospitals was found very uneven mostly because of their technology debt and also because there is no minimum ICT security level they must meet, unless they are part of the critical infrastructure. Authors propose to establish a minimal cyber security standard for all essential service sector organizations, be they part of the critical infrastructure or not.KeywordsCritical infrastructureCyber security incidentEmotetRansomwareRyukTrickBotCyber crime