How 100 hospitals switched to pen and paper to defeat a national cyber-attack

The attackers had demanded €160,000 (£138,000; $183,000) in bitcoin, but a national decision was taken not to pay. At hospitals still offline, IT teams raced to restore systems from backups. Most had relatively recent copies of their data – a key lesson. Regular backups allow organisations to recover more quickly. Within five days, most hospitals were back online and operating close to normal, with no reported deaths or serious harm to patients. It would take weeks longer to input all the new information recorded on paper during the outage. Some data was lost forever. Police are not commenting on their investigation into who was behind the attack. However, last year a ransomware gang linked to BackMyData had its website taken down in an international operation. Four Russians were arrested outside Russia, whose authorities do not co-operate with Western law enforcement. Cimpean said the attack could have happened anywhere. "The more technology you have, the more digitised you are, the greater the risk," he said. Last year the UK's NHS health service confirmed a hack on a blood testing company that affected around a dozen medical centres in London contributed to a patient's death . It was the first case of a death officially linked to a cyber-attack. Around the same time, Change Healthcare in the US was hacked, leading to widespread disruption. The company paid a $22m (£16m) ransom to hackers. …