For the seventh day in a row, the servers of the All India Institute of Medical Sciences (AIIMS) remain down likely because of security reasons being hacked. The hospital administration published a notice on Monday stating that all services are still being performed manually.
Based on a report made by AIIMS personnel, the IFSO, Special Cell has initiated an FIR under Section 385 IPC for extortion and Section 66/66F IT Act for cyber terrorism, the police said. The situation is being looked at.
Police also said that the ransomware’s genesis is unknown, but it is of foreign origin. The police also said that the hackers are expected to be from China or North Korea, most likely.
Aside from the Delhi Police, several other law enforcement agencies are collaborating with the cyber unit.
Two system analysts at the All India Institute of Medical Sciences (AIIMS) in Delhi have been suspended after a ransomware attack damaged one of India’s most famous hospitals’ online operations. The suspended analysts had already received a show-cause notice.
“The data restoration and server cleaning are in progress and are taking some time due to the volume of data and a large number of servers for the hospital services. Measures are being taken for cyber security,” AIIMS informed issuing a statement.
“All hospital services, including outpatient, in-patient, laboratories, etc. continue to run in manual mode,” added the statement.
The Delhi Police Department refuted reports of hackers demanding Rs 200 crores in cryptocurrencies as ransom, as declared in some media reports.
The National Investigation Agency (NIA) has joined the ongoing investigation into the alleged malware attack, which has already been investigated by agencies such as the India Computer Emergency Response Team (CERT-IN), Delhi Police, Intelligence Bureau, Central Bureau of Investigation (CBI), and Ministry of Home Affairs (MHA).
AIIMS officials said they have deployed additional employees to conduct diagnostics, labs, and outpatient services at the national medical institute, which has had its servers blocked owing to a suspected ransomware assault.
The AIIMS server has been down since Wednesday, November 23 when they reported a failure in their servers.