Cyber Incident Victim: NKS Superspeciality Hospital
Date:
Jun 2025
Location:
India
Summary
NKS Superspeciality Hospital and Parmanand Multi-Superspeciality Hospital experienced a cyber attack on their servers, prompting staff to suspect a technical glitch before IT teams confirmed a deliberate intrusion. Both facilities notified police, switched to manual operations to maintain essential services, and authorities enlisted technical experts to trace the attack’s origin and identify those responsible. The breach happened overnight, disrupting online appointment and prescription systems, while patient care continued through offline processes.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On June 11, 2025, Delhi Police launched an investigation into a cyber attack that targeted the servers of two hospitals in North Delhi, namely Parmanand Multi‑Superspeciality Hospital in Civil Lines and NKS Superspeciality Hospital in Gulabi Bagh. The incident was reported to the police immediately after it was detected. Hospital staff initially interpreted the disruption as a routine technical glitch, but a subsequent examination by the institutions’ IT teams confirmed that the outage resulted from a deliberate cyber intrusion. Following this confirmation, both hospitals notified the police of the attack.
According to police sources, the breach took place during the intervening night of June 10‑11, 2025. In response to the compromise, NKS Superspeciality Hospital activated manual systems to sustain essential patient care services while the affected servers were being investigated. The hospital’s management did not issue an immediate public statement about the hacking, and a comparable statement from Parmanand Multi‑Superspeciality Hospital was still pending at the time of reporting. Police enlisted technical experts to trace the origin of the attack and to identify the individuals or groups responsible.
The article also mentions that Medical Dialogues had earlier reported that the All India Institute of Medical Sciences in New Delhi experienced significant disruptions after a server breakdown, which led the hospital to shift to offline methods for prescriptions and other essential services. No further details about the specific malware, data exfiltration, or attacker motives were disclosed in the source material. The report does not indicate whether any patient data was compromised or whether any ransom demand was made. The narrative ends with the information available from the reported sources.