A massive ransomware attack forced more than 100 hospitals to disconnect from the internet, proving that even the most digital healthcare systems still need a plan for operating without technology.
WHAT’S HAPPENING
A ransomware attack targeting Romania’s healthcare system forced more than 100 hospitals to disconnect from the internet after hackers infiltrated a widely used medical software platform.
The emergency decision immediately stopped the attackers from spreading further but also left hospitals without access to connected medical systems, email, and internet services. Doctors, nurses, and staff returned to handwritten records and manual procedures while cybersecurity experts worked to contain the attack and restore operations.
Despite the disruption, hospitals resumed normal operations within days without any reported loss of life directly linked to the cyberattack.
WHY IT MATTERS
As healthcare becomes increasingly digital, cyberattacks have become a growing threat to patient care.
The Romanian response demonstrated that strong emergency planning, offline backup procedures, and rapid coordination can help organizations continue operating even after critical technology systems fail.
The incident also highlights the importance of preparing for cyber resilience—not just cyber prevention.
WHO BENEFITS
- Hospitals with strong disaster recovery plans.
- Healthcare organizations investing in cybersecurity.
- Patients protected by resilient emergency procedures.
- Governments strengthening critical infrastructure security.
WHO LOSES
- Healthcare organizations with weak cybersecurity defenses.
- Hospitals lacking tested backup and recovery plans.
- Cybercriminals when rapid response limits the impact of attacks.
WHAT HAPPENS NEXT
As ransomware attacks continue targeting healthcare systems worldwide, hospitals are expected to invest more heavily in cybersecurity, offline backup systems, employee training, and emergency response planning to ensure patient care can continue even during major technology disruptions.