France
FRA
CHSF Corbeil‑Essonnes ransomware paralyzes IT; patients diverted and data leaked
Detected 21 August 2022, CENTRE HOSPITALIER SUD FRANCILIEN suffered a ransomware attack that rendered business software, storage (including medical imaging), and admissions systems inaccessible, triggering the emergency plan and diversion of patients to other facilities. A $10M ransom was reported. On 23 September, the hospital confirmed exfiltrated data on patients, staff and partners was published online.
80
Estimated severity
80 / 100
94
Source reliability
94 / 100
Approximate Date
21/08/2022
Targeted Company
CENTRE HOSPITALIER SUD FRANCILIEN
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
France
Affected countries
France
Impacted regions
France · France
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service unavailabilityOperational disruptionERP or business system disruptionSafety impact
Affected sectors
Healthcare & Public Health
Affected departments
Information Technology
Attack Profile
Attack types
RansomwareExtortionData exfiltrationData breach
Attributed threat actors
LOCKBIT
Sources
Incident Sources
chsf.frhttps://www.chsf.fr/declenchement-du-plan-blanc-dimanche-21-aout-2022/chsf.frhttps://www.chsf.fr/cyberattaque-chsf-communique-de-presse/rfi.frhttps://www.rfi.fr/en/france/20220822-hackers-demand-10m-to-end-cyber-attack-on-paris-regional-hospitalsiliconrepublic.comhttps://www.siliconrepublic.com/enterprise/ransomware-cyberattack-french-hospital-chsfbitdefender.comhttps://www.bitdefender.com/en-us/blog/hotforsecurity/hackers-release-stolen-data-after-french-hospital-refuses-to-pay-decryption-ransom