AIIMS server hacked Hackers have allegedly demanded an estimated Rs 200 crore in cryptocurrency from the All India Institute of Medical Sciences (AIIMS), Delhi as its server remained down for the sixth consecutive day, official sources said on Monday.
It is feared that the data of around 3-4 crore patients could have been compromised due to the breach that came to light on Wednesday morning. The patient care services in emergency, outpatient, inpatient and laboratory wing are being managed manually as the servers remain down, sources said.
India Computer Emergency Response Team (CERT-IN), Delhi Police and representatives of the Ministry of Home Affairs are probing the ransomware attack.
Read this also | Additional staff deployed to run diagnostic, lab and OPD services at AIIMS Delhi
A case of extortion and cyber terrorism was registered by the Intelligence Fusion and Strategic Operations (IFSO) unit of the Delhi Police on November 25.
Official sources said internet services on computers in the hospital have been suspended on the recommendations of the probe agencies. AIIMS servers store data of many VIPs including former prime ministers, ministers, bureaucrats and judges.
“The hackers have reportedly demanded around Rs 200 crore in cryptocurrency,” one of the sources told PTI.
Meanwhile, NIC e-hospital database and application server for e-hospital have been restored. An official source said the NIC team is scanning and cleaning the infection from other e-hospital servers located at AIIMS, which are essential for delivery of hospital services.
Four physical servers arranged for restoration of e-hospital services have been scanned and made ready for database and application. Along with this, the work of network sanitization of AIIMS is going on. Antivirus solutions are organized for servers and computers. It is installed on about 1,200 out of 5,000 computers. The source said that 20 out of 50 servers have been scanned and this activity is going on 24×7.
“Complete sanitization of the network is likely to continue for five more days. Thereafter, e-hospital services can be started in a phased manner. Patient care services including emergency, outpatient, inpatient, laboratory etc. being continued,” said the source.