{"id":18885,"date":"2021-05-21T10:36:50","date_gmt":"2021-05-21T14:36:50","guid":{"rendered":"http:\/\/worldjusticenews.com\/news\/?p=18885"},"modified":"2021-05-21T10:36:50","modified_gmt":"2021-05-21T14:36:50","slug":"hse-cyber-attack-hackers-bail-out-irish-health-service-for-free","status":"publish","type":"post","link":"https:\/\/worldjusticenews.com\/news\/2021\/05\/21\/hse-cyber-attack-hackers-bail-out-irish-health-service-for-free\/","title":{"rendered":"HSE cyber-attack: Hackers bail out Irish health service for free"},"content":{"rendered":"<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p><b class=\"ssrcss-hmf8ql-BoldText e5tfeyi3\">Hackers responsible for causing widespread disruption to the Irish health system have unexpectedly gifted it with the tool to help it recover.<\/b><\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>The Conti ransomware group was reportedly asking the health service for $20m (\u00a314m) to restore services\u00a0<a class=\"ssrcss-9nsdc6-InlineLink e1no5rhv0\" href=\"https:\/\/www.bbc.co.uk\/news\/world-europe-57184977\" target=\"_blank\" rel=\"noopener\">after the &#8220;catastrophic hack&#8221;<\/a>.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>But now the criminals have handed over the software tool for free.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>The Irish government says it is testing the tool and insists it did not, and would not, be paying the hackers.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>Conti is still threatening to publish or sell data it has stolen unless a ransom is paid.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>On its darknet website, it told HSE: &#8220;We are providing the decryption tool for your network for free.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>&#8220;But you should understand that we will sell or publish a lot of private data if you will not connect us and try to resolve the situation.&#8221;<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-mysbf6-ComponentWrapper-CrossheadComponentWrapper e1xue1i83\" data-component=\"crosshead-block\">\n<h2 class=\"ssrcss-qozapo-StyledHeading e1fj1fc10\">&#8216;No ransom&#8217; pledge<\/h2>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>It was unclear why the hackers gave the tool &#8211; known as a decryption key &#8211; for free, said Health Minister Stephen Donnelly.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>&#8220;No ransom has been paid by this government directly, indirectly, through any third party or any other way. Nor will any such ransom be paid,&#8221; he told Irish broadcaster RT\u00c9.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>&#8220;It came as a surprise to us. Our technical team are currently testing the tool. The initial responses are positive.&#8221;<\/p>\n<div class=\"ssrcss-mysbf6-ComponentWrapper-CrossheadComponentWrapper e1xue1i83\" data-component=\"crosshead-block\">\n<h2 class=\"ssrcss-qozapo-StyledHeading e1fj1fc10\">Threats to publish data<\/h2>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>A decryption key is a computer programme that reverses the damage done by ransomware.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>Ransomware groups usually encrypt data on victims networks scrambling files to make them unusable without the decryption key.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>The Irish government says the tool could get hospitals and the health care system back to normal sooner than the process of rebuilding their IT from scratch.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>The Irish Department of Health was\u00a0<a class=\"ssrcss-9nsdc6-InlineLink e1no5rhv0\" href=\"https:\/\/www.bbc.co.uk\/news\/world-europe-57134916\" target=\"_blank\" rel=\"noopener\">attacked last Thursday, with a similar attack on the Health Service Executive (HSE) last Friday<\/a>.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"unordered-list-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<div class=\"ssrcss-1pzprxn-BulletListContainer e5tfeyi0\">\n<ul role=\"list\">\n<li><a class=\"ssrcss-9nsdc6-InlineLink e1no5rhv0\" href=\"https:\/\/www.bbc.co.uk\/news\/world-europe-57184977\" target=\"_blank\" rel=\"noopener\">Cyber-attack on Irish health service &#8216;catastrophic&#8217;<\/a><\/li>\n<li><a class=\"ssrcss-9nsdc6-InlineLink e1no5rhv0\" href=\"https:\/\/www.bbc.co.uk\/news\/world-europe-57154690\" target=\"_blank\" rel=\"noopener\">Ireland&#8217;s cyber-security &#8216;under continuous review&#8217;<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>On Thursday, the head of the Health Service Executive, Paul Reid, described the impact of the cyber attack as &#8220;catastrophic&#8221; and &#8220;stomach-churning&#8221;.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>The HSE has secured a High Court order preventing the Russia-based hackers &#8211; or any individual or business &#8211; from sharing, processing, or selling the information.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>The court injunction also applies to social media platforms such as Twitter, Google, and Facebook and therefore limits the gang&#8217;s scope for disseminating the information.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>The HSE said all elements of health services were affected, including major disruption to radiotherapy services.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>It said it was working to treat all urgent radiation patients in private hospitals.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>There have been cancellations across all outpatient services, with colonoscopies down by as much as 80% and chemotherapy and daily elective procedures down by 50%.<\/p>\n<div class=\"ssrcss-18mjolk-ComponentWrapper e1xue1i87\" data-component=\"image-block\">\n<figure class=\"ssrcss-1pvhdts-StyledFigure e34k3c23\">\n<div class=\"ssrcss-ab5fd8-StyledFigureContainer e34k3c21\"><span class=\"ssrcss-13t93ir-Placeholder e16icw910\"><img decoding=\"async\" class=\"ssrcss-1drmwog-Image ee0ct7c0\" src=\"https:\/\/ichef.bbci.co.uk\/news\/1536\/cpsprodpb\/C10D\/production\/_114812494_analysis-joe-tidy-nc.png\" srcset=\"https:\/\/ichef.bbci.co.uk\/news\/240\/cpsprodpb\/C10D\/production\/_114812494_analysis-joe-tidy-nc.png 240w, https:\/\/ichef.bbci.co.uk\/news\/320\/cpsprodpb\/C10D\/production\/_114812494_analysis-joe-tidy-nc.png 320w, https:\/\/ichef.bbci.co.uk\/news\/480\/cpsprodpb\/C10D\/production\/_114812494_analysis-joe-tidy-nc.png 480w, https:\/\/ichef.bbci.co.uk\/news\/624\/cpsprodpb\/C10D\/production\/_114812494_analysis-joe-tidy-nc.png 624w, https:\/\/ichef.bbci.co.uk\/news\/800\/cpsprodpb\/C10D\/production\/_114812494_analysis-joe-tidy-nc.png 800w, https:\/\/ichef.bbci.co.uk\/news\/976\/cpsprodpb\/C10D\/production\/_114812494_analysis-joe-tidy-nc.png 976w\" alt=\"Analysis box by Joe Tidy, Cyber reporter\" width=\"1536\" height=\"306.11957796014065\" \/><\/span><\/div>\n<\/figure>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>It&#8217;s not unprecedented for ransomware criminals to give away their decryption tools for free.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>Some of these gangs operate by a flimsy code of &#8220;ethics&#8221;, stating they don&#8217;t intend to endanger lives.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>In one case, criminals accidentally took a hospital offline; reports suggest the hackers gave the hospital a decryptor for free when they realised their mistake.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>Then again, there are ransomware operators who don&#8217;t care and are presumably delighted to watch chaos unfold as they extort money from their victims.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>Hundreds of health care facilities in the US alone were attacked in 2020.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>We don&#8217;t know what the motivation for the Conti gang is here.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>They clearly knew they were attacking a health service, and spent days trying to secure a ransom payment for the decryptor.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>Perhaps they suddenly grew a conscience.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>Perhaps they were under pressure from law enforcement or other hackers to rein it in.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>Or perhaps, faced with a wall of silence from the Irish Government, they gave up.<\/p>\n<\/div>\n<\/div>\n<div class=\"ssrcss-uf6wea-RichTextComponentWrapper e1xue1i84\" data-component=\"text-block\">\n<div class=\"ssrcss-18snukc-RichTextContainer e5tfeyi1\">\n<p>What&#8217;s telling is that the criminals are still hoping to get their payday by threatening to publish private data online.<\/p>\n<p>Source: <a href=\"https:\/\/www.bbc.co.uk\/news\/world-europe-57197688\" target=\"_blank\" rel=\"noopener\">bbc.co.uk<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<div class=\"mh-excerpt\">Hackers responsible for causing widespread disruption to the Irish health system have unexpectedly gifted it with the tool to help it recover. The Conti ransomware group was reportedly asking the health service for $20m (\u00a314m) <a class=\"mh-excerpt-more\" href=\"https:\/\/worldjusticenews.com\/news\/2021\/05\/21\/hse-cyber-attack-hackers-bail-out-irish-health-service-for-free\/\" title=\"HSE cyber-attack: Hackers bail out Irish health service for free\">[&#8230;]<\/a><\/div>\n","protected":false},"author":1,"featured_media":1952,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pmpro_default_level":"","footnotes":""},"categories":[13,109,2,6],"tags":[5056,7120,1009,7783,5801,7776,6270,5705],"class_list":{"0":"post-18885","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-good-news","8":"category-headline","9":"category-news","10":"category-world","11":"tag-cyber-attack","12":"tag-cyber-security","13":"tag-hackers","14":"tag-health-service-executive","15":"tag-healthcare","16":"tag-hse","17":"tag-ransomware","18":"tag-republic-of-ireland","19":"pmpro-has-access"},"_links":{"self":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts\/18885","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/comments?post=18885"}],"version-history":[{"count":2,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts\/18885\/revisions"}],"predecessor-version":[{"id":18887,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/posts\/18885\/revisions\/18887"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/media\/1952"}],"wp:attachment":[{"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/media?parent=18885"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/categories?post=18885"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/worldjusticenews.com\/news\/wp-json\/wp\/v2\/tags?post=18885"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}