Germany
DEU
Ransomware at Universitätsklinikum Düsseldorf disrupts emergency care (Sep 2020)
On 10 September 2020, Universitätsklinikum Düsseldorf suffered a cyberattack that exploited a widely known Citrix VPN vulnerability, causing major IT outages and suspension of emergency admissions; the BSI issued a warning, and the hospital reported step-by-step restoration with normal operations resuming around 12 October 2020 (https://www.uniklinik-duesseldorf.de/ueber-uns/pressemitteilungen/detail/it-ausfall-an-der-uniklinik-duesseldorf,https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2020/UKDuesseldorf_170920.html,https://www.businessinsider.de/politik/deutschland/hacker-legen-uniklinik-duesseldorf-lahm-staatsanwaltschaft-ermittelt-wegen-todesfall-einer-patientin,https://www.kma-online.de/aktuelles/it-digital-health/detail/it-sicherheit-von-kliniken-mangelhaft-a-45318).
85
Estimated severity
85 / 100
97
Source reliability
97 / 100
Approximate Date
10/09/2020
Targeted Company
UNIVERSITATSKLINIKUM DUSSELDORF
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Germany
Affected countries
Germany
Impacted regions
No information
Operational Impact
Duration
32 days
Financial impact (USD M)
No information
Impact types
Service unavailabilityOperational disruptionSafety impact
Affected sectors
Healthcare & Public Health
Affected departments
Information TechnologyFacilities & Physical Operations
Attack Profile
Attack types
RansomwareExploitation of vulnerability
Attributed threat actors
No information
Sources
Incident Sources
uniklinik-duesseldorf.dehttps://www.uniklinik-duesseldorf.de/ueber-uns/pressemitteilungen/detail/it-ausfall-an-der-uniklinik-duesseldorfbsi.bund.dehttps://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2020/UKDuesseldorf_170920.htmlbusinessinsider.dehttps://www.businessinsider.de/politik/deutschland/hacker-legen-uniklinik-duesseldorf-lahm-staatsanwaltschaft-ermittelt-wegen-todesfall-einer-patientinkma-online.dehttps://www.kma-online.de/aktuelles/it-digital-health/detail/it-sicherheit-von-kliniken-mangelhaft-a-45318inside-it.chhttps://www.inside-it.ch/post/klinik-hack-in-duesseldorf-erfolgte-fast-sicher-via-citrix-luecke-20200918borncity.comhttps://borncity.com/blog/2020/11/18/ransomware-befall-in-uniklinik-dsseldorf-nicht-fr-todesfall-verantwortlichmillerthomson.comhttps://www.millerthomson.com/en/insights/health/tragic-death-of-patient-in-german-cyberattack-a-reminder-of-vital-importance-of-cybersecurity-in-healthcare