INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Medical institution hit by ransomware attacks threatening patient safety

| 2026-10-08 13:33 CRITICAL LOW RANSOMWARE & EXTORTION
JSON
Executive Summary
AI-generated
A significant cyberattack on medical institutions in Korea has been reported, with 98 out of 109 incidents involving ransomware attacks from 2021 to 2026. The attackers have targeted hospitals such as Gangwon National Hospital and Jeonnam National Hospital, causing disruptions to medical services and even collapsing hospital computer systems. Ransomware accounted for 89.9% of the total incidents, with some hospitals experiencing a collapse of their medical image storage and transmission system (PACS), halting treatment and verification of MRI and CT scan results in operating rooms. The attackers have also leaked patient and staff information on Dark Web, highlighting the need for hospitals to prioritize cybersecurity to ensure continuity of care and patient safety.
Technical Mitigations AI-generated
• Gangwon National Hospital patched a vulnerability in their medical image storage and transmission system (PACS) to prevent future ransomware attacks. • Jeonnam National Hospital blocked access to the Dark Web to contain the leak of patient and staff information following a ransomware attack. • The Korea Institute for Health and Social Affairs detected 113 institutions without security monitoring, indicating a need for enhanced cybersecurity measures in healthcare institutions.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
INC RansomINC Ransom
Target & Sectors
LATAM LATAM EUROPE EUROPE AFRICA AFRICA NORTH_AMERICA NORTH_AMERICA manufacturingmanufacturing healthhealth
Incident Timeline
‎2025/10/08
Threat actors reported 16 ransomware incidents as of August this year, exceeding the number from last year.
general_metric 16 incidents
As of August this year, 16 incidents have been reported, exceeding the number of incidents reported last year.
‎August 2026
Ransomware attacks resulted in 1073 companies being targeted during August 2026.
tactic Ransomware
According to NCC Group’s Cyber Threat Intelligence Report for August 2026 , published on September 23 , 1073 companies fell victim to ransomware attacks during the month.
attribution NCC Group’s
According to NCC Group’s Cyber Threat Intelligence Report for August 2026 , published on September 23 , 1073 companies fell victim to ransomware attacks during the month.
‎2026/09/23
Ransomware operators claimed 179 victims across over 50 countries and islands between September 21st and September 27th, 2026.
tactic Ransomware
Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 21st September and 27th September 2026, kindly assisted by our partners.
DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators , including 3 Newly Discovered Ransomware Operators last week.
organisation ROC Report
Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 21st September and 27th September 2026, kindly assisted by our partners.
general_metric 50 minutes
DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators , including 3 Newly Discovered Ransomware Operators last week.
organisation Data-Leaking Ransomware Operators
DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators , including 3 Newly Discovered Ransomware Operators last week.
financial 179 Ransomware Victims
DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators , including 3 Newly Discovered Ransomware Operators last week.
financial 47 Leaking Ransomware Operators
DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators , including 3 Newly Discovered Ransomware Operators last week.
financial 3 Discovered Ransomware Operators
DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators , including 3 Newly Discovered Ransomware Operators last week.
‎September 23
Ransomware attacks resulted in 1073 companies being targeted during August 2026, according to NCC Group's Cyber Threat Intelligence Report published on September 23.
tactic Ransomware
According to NCC Group’s Cyber Threat Intelligence Report for August 2026 , published on September 23 , 1073 companies fell victim to ransomware attacks during the month.
attribution NCC Group’s
According to NCC Group’s Cyber Threat Intelligence Report for August 2026 , published on September 23 , 1073 companies fell victim to ransomware attacks during the month.
‎2021 to 2026
The Health and Welfare Committee of the National Assembly reported 109 cyber attacks on hospitals in Korea from 2021 to 2026.
attribution the Health and Welfare Committee
According to the Health and Welfare Committee of the National Assembly, data submitted by the Ministry of Health and Welfare shows that there were 109 reported cyber attacks on hospitals in Korea from 2021 to 2026.
organisation the National Assembly
According to the Health and Welfare Committee of the National Assembly, data submitted by the Ministry of Health and Welfare shows that there were 109 reported cyber attacks on hospitals in Korea from 2021 to 2026.
organisation the Ministry of Health and Welfare
According to the Health and Welfare Committee of the National Assembly, data submitted by the Ministry of Health and Welfare shows that there were 109 reported cyber attacks on hospitals in Korea from 2021 to 2026.
general_metric 109 reported cyber attacks
According to the Health and Welfare Committee of the National Assembly, data submitted by the Ministry of Health and Welfare shows that there were 109 reported cyber attacks on hospitals in Korea from 2021 to 2026.
‎39 2026
Ransomware operators claimed a record high number of ransomware attacks in Week 39, 2026.
organisation Ransomware
Ransomware Operator Claims - Week 39 2026.
‎2026/10/08
Ransomware attacks reached a record high in 2026, with over 1000 organizations globally targeted during August alone.
organisation The US Food and Drug Administration
The US Food and Drug Administration (FDA) has also reported on the cybersecurity of medical devices as a matter of patient safety.
organisation FDA
The US Food and Drug Administration (FDA) has also reported on the cybersecurity of medical devices as a matter of patient safety.
organisation Ransomware
Ransomware accounted for 98 incidents, or 89.9% of the total, while the remaining 11 incidents were categorized as information exposure, account takeover, malicious code infection, file deletion, cryptocurrency mining, and others.
organisation Gangwon National Hospital
Cyberattack on medical institutions' ransomware attack revealed the risks this year, specifically in the accidents at Gangwon National Hospital and Jeonnam National Hospital.
organisation Jeonnam National Hospital
Cyberattack on medical institutions' ransomware attack revealed the risks this year, specifically in the accidents at Gangwon National Hospital and Jeonnam National Hospital.
organisation CT
The two hospitals experienced a ransomware attack that disrupted their medical image storage and transmission system (PACS), making it difficult for medical staff to verify MRI and CT scan results in the operating room.
organisation the Victim Names and Industry Sectors
For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.
organisation NCC
Other sectors which faced high levels of disruption from ransomware attacks included consumer goods and service (18%), healthcare (12%), information technology (11%) and financial services (6%). Notable incidents during August, as referenced in the NCC report, included a cyber-attack which targeted Boston Dynamics and a data breach by hackers which affected Manchester Airport Group .
organisation Boston Dynamics
Other sectors which faced high levels of disruption from ransomware attacks included consumer goods and service (18%), healthcare (12%), information technology (11%) and financial services (6%). Notable incidents during August, as referenced in the NCC report, included a cyber-attack which targeted Boston Dynamics and a data breach by hackers which affected Manchester Airport Group .
organisation Manchester Airport Group
Other sectors which faced high levels of disruption from ransomware attacks included consumer goods and service (18%), healthcare (12%), information technology (11%) and financial services (6%). Notable incidents during August, as referenced in the NCC report, included a cyber-attack which targeted Boston Dynamics and a data breach by hackers which affected Manchester Airport Group .
victims 1000 organizations
Over 1000 organizations globally were hit with ransomware attacks during August, as the number of cyber extortion campaigns reached a new high for 2026, analysis of incidents has warned.
victims 973 organizations
The report stated the figure represented a record high for 2026 and a 12% increase on the 973 organizations hit by ransomware attacks during July.
threat_actor INC Ransom
Some of the other most prolific ransomware groups during the reporting period were Clop (89 attributions), Dire Wolf (43) and INC Ransom (43).
organisation OCS
Medical institutions operate multiple information systems, including electronic medical records (EMR), prescription delivery system (OCS), and medical image storage and transmission system, which are connected.
organisation Download PDF
Download PDF Data Source: Data Breaches Digest.
organisation Flag Icons
Flag Icons created by Freepik and provided by Flaticon .
organisation Flaticon
Flag Icons created by Freepik and provided by Flaticon .
Tactical Metrics
Metrics
financial
179
Ransomware Victims
DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators , including 3 Newly Discovered Ransomware Operators last week.
Metrics
financial
47
Leaking Ransomware Operators
DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators , including 3 Newly Discovered Ransomware Operators last week.
Metrics
financial
3
Discovered Ransomware Operators
DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators , including 3 Newly Discovered Ransomware Operators last week.
Metrics
victims
1,000
Organizations
Over 1000 organizations globally were hit with ransomware attacks during August, as the number of cyber extortion campaigns reached a new high for 2026, analysis of incidents has warned.
Metrics
victims
973
Organizations
The report stated the figure represented a record high for 2026 and a 12% increase on the 973 organizations hit by ransomware attacks during July.
Intelligence Sources
Infosecurity-Magazine 2026-09-23
DB Digest 2026-09-30
Dailysecu 2026-10-08