Humber River Hospital

Humber River Hospital in Toronto was hit with a ransomware attack in June 2021.

The hospital system immediately shut down its all IT systems , including our patient health records system.

The hospital had over 5000 computers (800 of which are servers) each were to be restarted manually; the patch (just developed by Symantec) was to be added to each computer and then each system recovered as required.

They also had to cancel a variety of clinics and re-directed impacted patients, the Emergency Department was still open but the ambulances were redirected.

Source: https://www.databreaches.net/ca-humber-river-hospital-hit-by-ransomware-variant-prompt-response-prevented-encryption-and-exfiltration/

TPRM report: https://scoringcyber.rankiteo.com/company/humber-river-hospital

"id": "hum223710123",
"linkid": "humber-river-hospital",
"type": "Ransomware",
"date": "06/2021",
"severity": "75",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Toronto, Canada',
                        'name': 'Humber River Hospital',
                        'type': 'Hospital'}],
 'date_detected': 'June 2021',
 'description': 'Humber River Hospital in Toronto was hit with a ransomware '
                'attack in June 2021. The hospital system immediately shut '
                'down its all IT systems, including our patient health records '
                'system. The hospital had over 5000 computers (800 of which '
                'are servers) each were to be restarted manually; the patch '
                '(just developed by Symantec) was to be added to each computer '
                'and then each system recovered as required. They also had to '
                'cancel a variety of clinics and re-directed impacted '
                'patients, the Emergency Department was still open but the '
                'ambulances were redirected.',
 'impact': {'operational_impact': ['Clinics cancelled',
                                   'Patients redirected',
                                   'Ambulances redirected'],
            'systems_affected': ['Hospital IT systems',
                                 'Patient health records system',
                                 'Clinics',
                                 'Emergency Department']},
 'response': {'containment_measures': ['Shut down all IT systems'],
              'remediation_measures': ['Manually restart each computer',
                                       'Apply Symantec patch',
                                       'Recover each system as required'],
              'third_party_assistance': ['Symantec']},
 'title': 'Ransomware Attack on Humber River Hospital',
 'type': 'Ransomware'}