Recent attacks have affected several establishments: in February, the Armentières facility saw 18 GB of data published after its servers were encrypted, and in May, the Simone Veil hospital in Cannes suffered a similar attack, with 61 GB of data disclosed. In 2023, reports of ransomware attacks increased, with healthcare establishments accounting for 10% of victims, according to ANSSI.
A report by CERT Santé counts 32 ransomware attacks in 2023, severely disrupting certain structures. France is the European country most affected by these cyberthreats, but only 27% of healthcare establishments have a protection program against ransomware.
The consequences are severe, with medical data being sold on the dark web. Pierre-Antoine Failly Crawford of Varonis reports that a file can sell for 300 euros. However, more and more organizations are refusing to pay ransoms, preferring to restore their systems from backups. CERT Santé notes increased efforts by healthcare establishments in cybersecurity, with a willingness to strengthen their defensive measures.
Credit : Le monde informatique