Cyberattack at the Rennes University Hospital: a complaint filed, ongoing investigations

The Rennes University Hospital filed a complaint and investigations were underway to identify the extent of the data leak that occurred during the cyberattack that targeted the hospital on Wednesday, June 21, AFP learned on Friday, June 23 from management. .

“The CHU has filed a complaint and it is the specialized unit with a prosecutor from the Paris prosecutor’s office who will carry out the necessary judicial investigations,” announced Véronique Anatole-Touzet, director of the CHU, during a press conference.

“We do not know the cause, the origin of the attack precisely. On the other hand, what we can affirm is that there is a strong presumption that the origin of the attack is external to the CHU, through one of our service providers,” added the director of the CHU.

“But this has not yet been proven and is still the subject of further investigation,” Anatole-Touzet said. “We do not know today (neither) the extent nor the extent of this data leak, we cannot say whether or not it is patient data.”

No ransom demand

According to management, the hackers have not demanded ransom and, at this stage of the investigations, no files have been encrypted.

If, with regard to patient care, the CHU has confirmed that the attack had no consequences in the SAMU, the SMUR and the making of appointments, on the IT side, the CHU management did not previously expect a return to the normal “several weeks”.

Since Thursday, teams from the Anssi (National Agency for Information Systems) have been at the CHU to strengthen its computer system. The controls will affect some 1,000 servers and 700 workstations in the CHU.

“When we know the extent of the exfiltrated data, we will notify the affected patients or professionals,” added the hospital director. This Friday, June 23 at 11:00 a.m., the CHU website was still not available. Internal messaging was restored Thursday night.

Other French hospitals have been subject to cyberattacks in recent months, including the one in Brest, which had to operate in degraded mode for several weeks in March.