Introduction:
AIIMS 1.3TB data compromised😱: As we’ve seen, in this particular week, we have heard about several groups trying to compromise with the security of large Organizations’ technical infrastructure by entering into their systems and locking their important data and asking for huge ransom money. as these attacks are rising day by day and getting common, so let’s understand the case of another mainstream organization which is also recognized as India’s most advanced group of medical research and hospital group which is registered under Government of India.
Understanding the scenario-1.3TB data😱:
just few days ago we heard about Toyota’s Data breach news, where 240GB of data was compromised, but in the case of AIIMS the data compromised was terribly huge and sensitive. Based on current analysis by stakeholders concerned, about 1.3 terabyte data were encrypted in that ransomware attack on the All-India Institute of Medical Sciences’ (AIIMS) information technology network by unknown threat actors, according to the government. The ransomware attack paralyzed several critical services at AIIMS. The systems were down for over two weeks, causing delays in patient care, lab reports, and billing services. The attack also compromised sensitive data, including patient records.
tangled situations😵💫:
As per the sources 1.3TB of data was encrypted and 5 servers were affected. CERT-In and other stakeholder entities had advised necessary remedial measures, Minister told to Rajya Sabha. as per the estimation sensitive data of 3-4 crore patients was at risk, experts had raised concerns that the data encrypted can be sold to wrong hands in dark webs. On November 23, 2022, a breach was detected in AIIMS’ internal systems which included 1.3TB of data. Not much later, the hospital digital patient management system was crippled. In a statement, AIIMS confirmed the hack, adding that data restoration is taking time owing to the large number of servers used by the hospital that cater to 15 lakh outpatient and 80,000 inpatient cases each year.
A Chinese Angle🤖:
India has been increasingly cautious about cybersecurity threats from China, particularly in light of ongoing border tensions and previous incidents where Chinese cyber espionage groups were suspected of targeting Indian infrastructure. The AIIMS attack(1.3TB) has been seen within this broader context of cyber threats potentially originating from China, leading to heightened scrutiny and calls for stronger cybersecurity measures to protect critical infrastructure in India.The ransomware attack on AIIMS in New Delhi had raised concerns about a potential Chinese angle due to the sophisticated nature of the attack and the possible involvement of state-backed hacking groups. Although no conclusive evidence has been publicly disclosed linking the attack directly to Chinese entities.
Actions Taken🛡️:
The Indian Computer Emergency Response Team within the Ministry of Electronics and Information Technology, Delhi cybercrime special cell, Indian Cybercrime Coordination Centre, Intelligence Bureau, Central Bureau of Investigation (CBI), National Forensic Sciences University, National Critical Information Infrastructure Protection Centre and NIA, among others, investigated the cyber-attack. The hackers who targeted AIIMS 1.3TB data in New Delhi reportedly demanded a ransom of approximately ₹200 crore (about $24 million) in cryptocurrency. This significant ransom demand highlighted the severity of the attack, and the value placed on the data and systems that were compromised. Despite the demand, there is no confirmed information about whether the ransom was paid or if any negotiations took place.
Conclusion:
So as we move towards the conclusion, the picture that comes in our mind says, The ransomware attack on AIIMS in New Delhi underscored significant vulnerabilities in the cybersecurity of India’s critical healthcare infrastructure. With a ransom demand of ₹200 crore🙄 to release 1.3TB data, the attack disrupted vital medical services and compromised sensitive patient data. The incident has sparked concerns over potential foreign involvement, particularly from China, and has prompted the Indian government to implement stricter cybersecurity protocols to safeguard against future threats. This attack serves as a stark reminder of the growing risks in the digital age and the need for robust defenses in essential sectors.
Thank you for reading till last😊, hope you got to learn something from this, for getting more article similar to this topic you can stay tuned. If you’re interested in knowing more about Ransomware attacks you can read about Toyota Hacked!!!