Irish officials warn of ongoing disruptions to health system, long recovery following ransomware incident

The incident, which Irish officials have blamed on Conti ransomware, has rocked the public health system.

Irish officials say it will take “many weeks” to fully restore the IT infrastructure of the country’s $25 billion public health system following a ransomware attack last week.

While emergency departments continue to operate normally, Ireland’s Health Service Executive (HSE), as the public health  system is known, said Wednesday that patients seeking non-urgent care should expect long delays.

“Work continues today in assessing the impact and beginning to restore HSE IT systems,” the statement said. “This work will take many weeks and we anticipate major disruption will continue due to the shutdown of our IT systems. We should start to see some early signs of recovery in some sites over the coming days.”

The incident, which Irish officials have blamed on a popular strain of ransomware called Conti, has rocked the Irish public health system. One maternity hospital in Dublin told pregnant women not to come to the hospital unless they are near their due date or it is an emergency. The ransomware also disrupted the IT systems of the Irish government agency responsible for child welfare and social services.

“Hospitals are working to get priority systems back online including radiology and diagnostic systems, maternity and infant care, patient administration systems, chemotherapy and radiation oncology,” the HSE said Wednesday.

The Conti ransomware gang has reportedly demanded $20 million to decrypt HSE computers, but Irish Prime Minister Micheál Martin has said the government will not pay a ransom.

Recovering from the hack has been an international effort. The Irish government has brought in cybersecurity specialists at McAfee and has shared data on the intrusion with the European Union.

Recent ransomware threats in Ireland have extended beyond HSE: There was also malicious cyber activity on the network of the Irish Department of Health, the Irish officials have said. Investigators, however, thwarted the hackers’ attempt to execute ransomware “due to the deployment of tools during the investigation,” according to a statement from Ireland’s National Cyber Security Centre.

The Irish government’s refusal to pay off its extortionists comes amid scrutiny of a reported decision by Colonial Pipeline, a major U.S. fuel transporter, to pay a multimillion-dollar ransom following a hack earlier this month. U.S. lawmakers and security experts have criticized Colonial Pipeline for not sharing more details on the reported ransom, saying it makes it harder to address the ransomware problem.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure