Azienda Sanitaria Provinciale di Cosenza
Incident posture
Linked entities
- Victim
- Azienda Sanitaria Provinciale di Cosenza
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
A cyberattack disrupted the website of Azienda Sanitaria Provinciale di Cosenza, blocking essential services including online appointment bookings, consultations, and vaccination information access. The compromise of sensitive data security and prolonged service suspension hindered communication between patients and healthcare providers, delayed emergency management, and caused significant public inconvenience, though the full extent of system damage remains unconfirmed.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
A cyber attack targeted the website of the Provincial Health Authority of Cosenza (ASP Cosenza) in early February 2024, disrupting essential online services. The attack impeded public access to critical healthcare functions, including appointment reservations, online medical consultations, and information portals related to vaccinations and general medical services. Security breaches compromised sensitive information stored within the affected systems, though the specific nature and scope of compromised data remained unconfirmed. Technical disruptions forced ASP Cosenza to suspend its online platforms, severing a primary communication channel between patients and healthcare providers. This suspension created immediate operational challenges across the health authority’s service delivery framework.
The prolonged outage hindered the efficient management of health emergencies and routine medical care coordination due to the reliance on digital systems for information exchange. Patients experienced significant inconvenience in accessing care information, scheduling appointments, or obtaining consultation services typically available online. The disruption slowed administrative workflows and emergency response coordination between healthcare facilities under ASP Cosenza’s jurisdiction. Authorities had not publicly disclosed technical details regarding the attack vector, perpetrator identity, or full extent of system damage as of the reporting date. Service restoration timelines and recovery efforts were not specified in available information, leaving the long-term operational and data security implications unresolved at the time of reporting.
Sources
Sources available to members: 1 source.