Breaches and incidents

Kamalnayan Bajaj Hospital (Chhatrapati Sambhajinagar, India): ransomware disables all nine servers, Crypto24 note claims data theft

Per Medical Dialogues, the hospital management information system stopped working around 3 am on 18 Oct.

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Per Medical Dialogues, the hospital management information system stopped working around 3 am on 18 Oct; antivirus records indicated a virus attack affecting all nine servers, the firewall could not be accessed, and billing, insurance claims and government scheme processing were disrupted.
  • Root cause: not disclosed.
  • A ransom note attributed to “Crypto24 Group” claimed sensitive information was stolen and threatened publication on a Tor leak site; the theft is the attacker’s claim as reported.
  • Satara area police registered a case under Section 308 of the Bharatiya Nyaya Sanhita and IT Act provisions; the hospital activated its disaster management plan, informed authorities and CERT-In, and ran processes manually.