Cyber attack on AIIMS originated from China, say Government sources, data now secured

The ransomware attack on the computer network that crippled Delhi’s All India Institute of Medical Sciences, or AIIMS originated from China and may have been carried out by Chinese hackers, the Ministry of Health and Family Welfare said. Data of lakhs of patients from the 5 physical servers that were infiltrated by the hackers were also recovered. [caption id=“attachment_11807411” align=“alignnone” width=“640”] Given Xi Jinping’s recent aggression towards India at Tawang, Minister of State for IT Rajeev Chandrasekhar’s remarks of the attack being a part of a larger conspiracy seems valid.
Image Credit: Network18[/caption] “The server attack was by the Chinese; the probe found that it originated from China,” said a top source. “Of the 100 servers — 40 physical and 60 virtual — five physical servers were infiltrated by the hackers. The damage could have been far worse but is now contained. Data in the five servers has been successfully retrieved,” said a Ministry of Health and Family Welfare spokesperson. India’s National Investigation Agency had been investigating the ransomware attack, that crippled the teaching hospital for days.   Minister of State for IT Rajeev Chandrasekhar had said, “I can’t comment on that as it is a subject matter of an investigation by the NIA…It is pretty clear that it is a deliberate and targeted effort…a ransomware attack on AIIMS’ system… and NIA is investigating it.” The minister had said last week that the ransomware attack seemed to be a part of much more coordinated conspiracy.   “It is clearly a conspiracy and it has been planned by forces that are pretty significant. It is a sophisticated ransomware attack. We will wait for the outcome of the investigations by CERT-In and the NIA before we come to a conclusion,” Chandrasekhar had said on December 2. Given Xi Jinping’s recent aggression towards Tawang, the minister’s does seem to carry weight. AIIMS’s system first glitched on November 23, after which a case of extortion and cyber terrorism was registered by the Intelligence Fusion and Strategic Operations (IFSO) unit of the Delhi Police.  Police have, however, denied reports that hackers asked for Rs 200 crore in cryptocurrency as ransom to restore the system, as has been reported by the media.