The Esslingen Clinic's IT systems were accessed by unidentified individuals. The cyberattack also erased administrative data in addition to limitations on image examination processes.
A deliberate cyberattack on the company's IT system was documented. Current information indicates that an unidentified individual has intentionally damaged certain servers by remotely accessing the hospital's IT systems.
This affects imaging in the fields of ultrasound and endoscopy as well as radiology's image processing systems.
Hospital operations are ongoing in the interim, although the clinic claims that delays are being caused by the imaging system's malfunction.
Source: https://www.lemagit.fr/actualites/366561813/Cyberhebdo-du-1er-decembre-2023-une-semaine-detonante
TPRM report: https://scoringcyber.rankiteo.com/company/klinikum-esslingen-gmbh
"id": "kli1125224",
"linkid": "klinikum-esslingen-gmbh",
"type": "Breach",
"date": "11/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Esslingen',
'name': 'Esslingen Clinic',
'type': 'Hospital'}],
'attack_vector': 'Remote Access',
'data_breach': {'type_of_data_compromised': ['Administrative Data']},
'description': "The Esslingen Clinic's IT systems were accessed by "
'unidentified individuals. The cyberattack also erased '
'administrative data in addition to limitations on image '
'examination processes. A deliberate cyberattack on the '
"company's IT system was documented. Current information "
'indicates that an unidentified individual has intentionally '
"damaged certain servers by remotely accessing the hospital's "
'IT systems. This affects imaging in the fields of ultrasound '
"and endoscopy as well as radiology's image processing "
'systems. Hospital operations are ongoing in the interim, '
'although the clinic claims that delays are being caused by '
"the imaging system's malfunction.",
'impact': {'data_compromised': ['Administrative Data'],
'operational_impact': 'Delays in Imaging System Operations',
'systems_affected': ['Ultrasound Systems',
'Endoscopy Systems',
"Radiology's Image Processing Systems"]},
'initial_access_broker': {'entry_point': 'Remote Access'},
'motivation': 'Intentional Damage',
'threat_actor': 'Unidentified Individuals',
'title': "Cyberattack on Esslingen Clinic's IT Systems",
'type': 'Cyberattack'}