French hospital suspends operations after cyberattack

The latest cyberattack targeted the Andre-Mignot Hospital, leading the Paris prosecutors' office to open a preliminary investigation into attempted extortion.

Hackers often threaten to post confidential data of patients and staff on the dark web if their ransom demands are not fulfilled.
AFP Archive

Hackers often threaten to post confidential data of patients and staff on the dark web if their ransom demands are not fulfilled.

The Andre-Mignot Hospital has been forced to cancel operations in Versailles, near Paris, after being hit by a cyberattack over the weekend said France's health ministry.

The Hospital Centre of Versailles had to transfer six patients since Saturday evening – three from intensive care and three from the neonatal unit – said Health Minister Francois Braun, as he visited the hospital Sunday evening.

Others might follow, he added.

The regional health agency (ARS) said the Andre-Mignot Hospital had cancelled operations, but was doing everything possible to keep walk-in services and consultations running.

The cyberattack had led to a "total reorganisation of the hospital", the minister added.

While the machines were still functioning in the intensive care unit, more people were needed to watch the screens as they were no longer working as part of a network, Braun said.

READ MORE: Australia mulling ban on paying ransom to hackers

Investigation launched

The Paris prosecutors' office has opened a preliminary investigation into attempted extortion, as well as the access and maintenance of the state's digital system.

The hospital had also filed a formal complaint Sunday.

For several months now, hospitals and health systems in France have been targeted with such cyberattacks.

According to Braun, "the health system suffers daily attacks" in France, but the "vast majority of these attempts are prevented".

In August, the Corbeil-Essonnes hospital on the outskirts of Paris – which provides healthcare for nearly 700,000 residents – was targeted.

Its operations were severely disrupted for several weeks before returning to normal in mid-October.

On that occasion, the attack was followed by a demand for $10 million, subsequently lowered to one or two million.

The hackers had set a September 23 deadline for the hospital to pay the ransom, after which they posted confidential data on patients and staff to the "dark web".

READ MORE: Cyberattack shuts down Albania's online public services

Route 6