Hospitals attacked by malware

Date: 19.07.2019

Responsible body: DRK Trägergesellschaft Südwest

Type of data breach: Security incident caused by malicious software

A number of hospitals belonging to DRK Trägergesellschaft Südwest fell victim to an attack by malware. As a result, data was encrypted by the malware and hospital operations were severely disrupted.

Categories of data concerned: Patient data

Legal classification:  In accordance with the obligation under Art. 33 of the EU General Data Protection Regulation the sponsoring company has reported the violation of the protection of personal data to the State Commissioner for Data Protection and Freedom of Information (LfDI) as the competent supervisory authority.

Recommendation in the event of a security incident caused by malware

IT-Strukturen und Patientendaten müssen daher über eine ausreichende Widerstandsfähigkeit gegenüber Cyber-Attacken und einen angemessenen Schutz verfügen. Andernfalls drohen Schäden für die Gesundheit und den Datenschutz von Patientinnen und Patienten und wirtschaftliche Schäden.” (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)

Country: Germany

Source: Privacy RLP

Back to the overview of the data breaches