– How much this involves and what kind of data it is, we are investigating, says Pia Hultkrantz, communications manager at Sophiahemmet.
The cyber attack, a so-called ransomware attack, happened late last Tuesday evening and the business is still affected.
Files for sale
According to an IT security expert that P4 Värmland spoke to, a large number of files resulting from the attack are now for sale. However, the hospital’s communications manager cannot confirm the extent.
– It is clear that this is a new step in this attack that we have been subjected to.
The hospital has received a message from the hacker group Medusa in the form of a screenshot, where they announce that they have taken data from something they call “Sophiahemmet university”, says Pia Hultkrantz.
Experts confirm
This has also been confirmed by IT security experts with whom the hospital collaborates.
– We are investigating with all our resources and together with Region Stockholm’s IT experts to find out what it is all about. As soon as we know that, we can become more active and act, says Pia Hultkrantz.
Region Stockholm’s chief physician Elda Sparrelid says they work in close collaboration with Sophiahemmet. They have taken safety-related protective measures due to the incident, she writes in an email to SVT.
– This meant certain consequences for parts of the IT environment at Sophiahemmet and a few more care providers in connection with Sophiahemmet. We have now gradually been able to start connecting most healthcare providers again. Nothing has affected other care providers in the region.
Elda Sparrelid says there are no indications that patient or health data information has been leaked.
– The concerned caregivers at Sophiahemmet and in connection with Sophiahemmet have worked with manual backup routines so that as few patients as possible have been affected.
