Union Hospital confirms cyber attack; sources say hackers want US$10m ransom

Union Hospital has confirmed that its computer system faced a cyber attack on Monday morning, with sources saying that the hospital was blackmailed to pay US$10 million (~HK$78 million) by the hackers but the hospital refused. 

Sources also said the hackers used a ransomware called “LockBit” to facilitate the attack. They encrypted a significant amount of computer files, including lab reports, and told the hospital not to delete or alter the encrypted files. 

The hackers asked the hospital to communicate with them and pay the ransom using a specific web browser, sources said. 

The case has been reported to the Department of Health, the Office of the Privacy Commissioner for Personal Data and the police, according to the hospital. 

In the announcement made on Thursday, the hospital condemned the attack which caused “some operational disruptions” and said it had activated the emergency response system and stepped up cyber security measures to block further intrusion. 

“A team of cyber security experts has been appointed to conduct a thorough system inspection and recovery in order to ensure medical service continuity,” the hospital said. 

The hospital also reassured that all staff members have stayed vigilant on cyber security, with all patient records encrypted and password-protected at all times. 

No leakage of patient data was found, the hospital added. 

The hospital continued that an investigation of the attack is in progress and it will make further updates on its official website once available.