Russian hackers say Japan hospital paid $30,000 in ransomware attack

Kyodo News

TOKYO - A Russia-based hacker group has claimed a Japanese hospital paid $30,000 to regain access to electronic medical records that were encrypted in a ransomware attack last October, causing major disruption to the medical institution&#x27;s operations.The town of Tsurugi, Tokushima Prefecture, which runs the targeted Handa Hospital, has denied paying ransom money, and experts suspect that an IT firm involved in attempts to restore access to the records secretly reached a deal with the hackers.Japanese police have been urging those targeted in ransomware attacks to not pay money demanded of them.<ul class="op-related-articles">	<li><a href="https://news.abs-cbn.com/overseas/09/30/22/pro-russia-hackers-stop-cyberattacks-due-to-money-woes">Pro-Russia hackers stop cyberattacks due to money woes</a></li>	<li><a href="https://news.abs-cbn.com/business/07/04/21/massive-ransomware-attack-potentially-hit-1000-businesses">Massive ransomware attack potentially hit 1,000 businesses</a></li>	<li><a href="https://news.abs-cbn.com/business/07/06/21/1500-businesses-ransomware-attack-kaseya">Up to 1,500 businesses affected by ransomware attack, US firm&#x27;s CEO says</a></li>	<li><a href="https://news.abs-cbn.com/overseas/11/01/20/ransomware-surge-imperils-hospitals-as-pandemic-intensifies">Ransomware surge imperils hospitals as pandemic intensifies</a></li></ul>A senior member of the hacker group, LockBit 3.0, said it received a bitcoin payment on Nov. 21 last year after holding talks with a representative of the hospital via a special website. The group originally demanded $60,000 but the amount was negotiated down to half that amount, the person said.Shigeru Kanenishi, the mayor of Tsurugi, said, &quot;As we understand it, the town has not paid ransom money.&quot;The town paid 70 million yen ($472,000) to an IT firm in Tokyo to probe the attack and attempt to restore the encrypted data.The firm has declined to comment on the case, citing a confidentiality agreement, but it said it generally does not directly negotiate with hacker groups. It may use data restoration programs if they can be obtained, it said.At the time of the Oct. 31 attack, Handa Hospital refused to pay the ransom, saying it will instead build a new electronic medical record system at a cost of 200 million yen.The hospital confirmed in January it regained access to the original system, saving it from having to build another, and it resumed regular medical examinations across all departments after two months of disruptions.An expert panel investigating the case concluded in a report in June that the IT business operator is highly likely to have obtained a data restoration program somehow.&quot;I can only think that the IT business operator had negotiated with the group,&quot; said a panel source.A National Police Agency official in charge of cyberattacks warned against entities paying ransom money, saying, &quot;Not only does it promote cybercrime, there is no guarantee the data will be restored even after making payments.&quot;Ransomware attacks are on the rise in Japan. Last month, the agency reported that Japanese entities suffered 114 damage-causing attacks in the first half of this year, up 87 percent from a year earlier.Of the reported ransomware cases, 59 targeted small to medium-sized companies and 36 were large corporations. They included 37 manufacturers, 20 service providers and five hospitals, according to the agency.<div>==Kyodo</div><figure class="op-interactive"><iframe allow="autoplay; fullscreen" frameBorder="0" height="100%" id="ivsplayer01" scrolling="no" src="https://player.ivideosmart.com/ivsplayer/v4/dist/html/iframe-src.html?iframeid=ivsplayer01&amp;key=e8c22c015ca9eafa76f1e3edfa03c603&amp;spid=3001339&amp;vid=1696767" width="100%"></iframe></figure><div class="iwantbar">Watch more News on <a href="https://www.iwanttfc.com/#!/browse/Genres/News/tag_id_genres/id_news" target="_blank">iWantTFC</a></div>

A Russia-based hacker group has claimed a Japanese hospital paid $30,000 to regain access to electronic medical records that were encrypted in a ransomware attack last October, causing major disruption to the medical institution's operations.

Russian hackers say Japan hospital paid $30,000 in ransomware attack | ABS-CBN

Halalan 2025

Entertainment

News

Metro.Style

Sports

More

Traffic

Horoscope

Overseas

Russian hackers say Japan hospital paid $30,000 in ransomware attack

Russian hackers say Japan hospital paid $30,000 in ransomware attack

Kyodo News

Published Oct 27, 2022 06:25 AM PHT

Read More:

Japan

Russia

ransomware

hacker

cybercrime

Kyodo

ABS-CBN is the leading media and entertainment company in the Philippines, offering quality content across TV, radio, digital, and film. Committed to public service and promoting Filipino values, ABS-CBN continues to inspire and connect audiences worldwide.

Corporate

Investors

Governance

International Distribution

Corporate

Governance

Investors

International Distribution

NPC Seal of Registration

Privacy Policy

AI Policy

Terms of Service

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.

NPC Seal of Registration

Privacy Policy

Terms of Service

AI Policy

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.

NPC Seal of Registration

Privacy Policy

Terms of Service

AI Policy

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.