Ransomware attack forces 18 Romanian hospitals to go offline

A mass ransomware attack struck the Hipocrate Information System used by Romanian hospitals on 11–12 February 2024, causing the platform to be taken offline; roughly 25 hospitals had encrypted databases while about 75 others shut systems down as a precaution, disrupting medical operations and forcing a return to paper records. DNSC attributes the encryption to Backmydata (a Phobos family variant) and reports a 3.5 BTC ransom demand; investigators say most affected hospitals retain recent backups and there is currently no confirmed evidence of data exfiltration.