Tonga’s top health official warned residents of a ransomware attack that took down the National Health Information System. The attack affected the organization’s website and other IT tools, rendering medical records and patient history inaccessible. The Ministry of Health published statements explaining the cyberattack and its impact on the system. Minister of Health Ana ‘Akau’ola informed parliament that an unnamed ransomware gang attacked the system, demanding millions in ransom to restore it. The attack was discovered on June 15, and officials reached out to their IT contractor in Fiji, who confirmed the ransomware attack. The National Health Information System, introduced in 2019, was crucial for digitizing government records. The attack disrupted hospital operations, including ordering pills and accessing patient records. The Ministry advised people to bring prescription cards to doctors as the system was inaccessible.
Source: https://therecord.media/tonga-ministry-of-health-hit-with-cyberattack
TPRM report: https://scoringcyber.rankiteo.com/company/world-health-organization-western-pacific-region
"id": "wor901062025",
"linkid": "world-health-organization-western-pacific-region",
"type": "Ransomware",
"date": "6/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '100,000',
'industry': 'Healthcare',
'location': 'Tonga',
'name': 'Ministry of Health, Tonga',
'type': 'Government'}],
'attack_vector': 'Unknown',
'customer_advisories': 'Bring cards that list out their prescriptions',
'data_breach': {'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Medical records',
'Prescriptions',
'Health risks',
'Future plans for patients']},
'date_detected': '2023-06-15',
'date_publicly_disclosed': '2023-06-15',
'description': 'Tonga’s top health official warned the island country’s '
'residents that a ransomware attack has taken down its '
'National Health Information System.',
'impact': {'data_compromised': ['Medical records',
'Prescriptions',
'Health risks',
'Future plans for patients'],
'operational_impact': 'Medical records inaccessible, prescription '
'ordering disrupted',
'systems_affected': ['National Health Information System',
'Ministry of Health website']},
'investigation_status': 'Ongoing',
'motivation': 'Financial',
'ransomware': {'data_encryption': True, 'ransom_demanded': 'Millions'},
'references': [{'source': 'Matangi Tonga'}],
'response': {'communication_strategy': ['Public statements',
'Press conferences'],
'third_party_assistance': ['Cybersecurity experts from '
'Australia']},
'title': "Ransomware Attack on Tonga's National Health Information System",
'type': 'Ransomware'}