Supply chain attacks continue to pose a major threat to the security of sensitive data and critical systems. Five hospitals in Ontario, Canada have been struggling to function this month after a ransomware group hit their IT and services provider. DataBreaches.net broke the news when the Daixin Team revealed that they were responsible for the attack and had started leaking patient data:
Daixin Team is now claiming responsibility for — and leaking data from — an attack that has significantly impacted five Canadian hospitals in Ontario.
TransForm Shared Service Organization provides IT, supply chain, and accounts payable services to Windsor Regional Hospital, Hotel Dieu Grace, Erie Shores Healthcare, Hospice of Windsor-Essex, and the Chatham-Kent Health Alliance. According to media coverage and news releases by TransForm, a ransomware attack disrupted the hospitals’ access to Wi-Fi, email, and patient information systems. Surgeries and appointments have reportedly been canceled or rescheduled in some cases, and patients could not be reached by phone to alert them to the interrupted services. Yesterday, CBC reported that radiation treatment for cancer patients was being transferred from Windsor and to other hospitals.
Read more at DataBreaches.net.
While some ransomware groups originally said they would not attack hospitals, there are some groups who do not hesitate to hit hospitals or medical centers. Attacks on vendors may be how they gain access, as in this case.
