French hospital cancels operations after cyberattack

A hospital complex in Versailles, near Paris, had to cancel operations and transfer some patients after being hit by a cyberattack over the weekend, France's health ministry said.

André Mignot hospital near Paris. © Wikimedia/CC/Henri Salomé

The Hospital Centre of Versailles - which consists of Andre-Mignot Hospital, Richaud Hospital and the Despagne Retirement Home - was affected by the hacking attempt, said the complex's management.

The regional health agency (ARS) said the Andre-Mignot Hospital had cancelled operations, but was doing everything possible to keep walk-in services and consultations running.

Telephone communications, internet, and all computer systems have been cut off.

The group of hackers behind the attack have demanded a ransom, according to Richard Delepierre, co-chairman of the establishment's supervisory board on Monday.

"A ransom, the amount of which I do not know, has been requested but we do not intend to pay it," assured Delepierre, who is also mayor of Chesnay-Rocquencourt.

In France, public establishments never pay ransoms because the law forbids them to do so.

Investigation underway

Six patients had been transferred since Saturday evening - three from intensive care and three from the neonatal unit - said Health Minister Francois Braun, as he visited the hospital Sunday evening. Others might follow, he added.

The cyberattack had led to a "total reorganisation of the hospital", the minister added.

While the machines were still functioning in the intensive care unit, more people were needed to watch the screens as they were no longer working as part of a network, Braun said.

Prendre en otage la santé des Français est inadmissible. J’étais ce soir avec @jnbarrot auprès des équipes de l’hôpital André-Mignot, victime d’une cyberattaque. Tous nous moyens sont déployés aux côtés des professionnels mobilisés pour assurer la prise en charge des patients. pic.twitter.com/pffcRJh8q5

— François Braun (@FrcsBraun) December 4, 2022

The Paris prosecutors' office has opened a preliminary investigation into attempted extortion, as well as the access and maintenance of the state's digital system. The hospital had also filed a formal complaint Sunday.

For several months now, hospitals and health systems in France have been targeted with such cyberattacks.

According to Braun, "the health system suffers daily attacks" in France, but the "vast majority of these attempts are prevented".

In August, the Corbeil-Essonnes hospital on the outskirts of Paris, which provides healthcare for nearly 700,000 residents, was targeted.

• Hackers demand $10m to end cyber attack on Paris regional hospital

Its operations were severely disrupted for several weeks before returning to normal in mid-October.

On that occasion, the attack was followed by a demand for €9.46 million, subsequently lowered to one or two million.

The hackers had set a 23 September deadline for the hospital to pay the ransom, after which they posted confidential data on patients and staff to the "dark web".

(with AFP)