Cyber Incident Victim: Azienda Sanitaria Provinciale di Cosenza
Date:
Feb 2024
Location:
Italy
Summary
A cyberattack disrupted the website of Azienda Sanitaria Provinciale di Cosenza, blocking essential services including online appointment bookings, consultations, and vaccination information access. The compromise of sensitive data security and prolonged service suspension hindered communication between patients and healthcare providers, delayed emergency management, and caused significant public inconvenience, though the full extent of system damage remains unconfirmed.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 4 motives | 6 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
A cyber attack targeted the website of the Provincial Health Authority of Cosenza (ASP Cosenza) in early February 2024, disrupting essential online services. The attack impeded public access to critical healthcare functions, including appointment reservations, online medical consultations, and information portals related to vaccinations and general medical services. Security breaches compromised sensitive information stored within the affected systems, though the specific nature and scope of compromised data remained unconfirmed. Technical disruptions forced ASP Cosenza to suspend its online platforms, severing a primary communication channel between patients and healthcare providers. This suspension created immediate operational challenges across the health authority’s service delivery framework.
The prolonged outage hindered the efficient management of health emergencies and routine medical care coordination due to the reliance on digital systems for information exchange. Patients experienced significant inconvenience in accessing care information, scheduling appointments, or obtaining consultation services typically available online. The disruption slowed administrative workflows and emergency response coordination between healthcare facilities under ASP Cosenza’s jurisdiction. Authorities had not publicly disclosed technical details regarding the attack vector, perpetrator identity, or full extent of system damage as of the reporting date. Service restoration timelines and recovery efforts were not specified in available information, leaving the long-term operational and data security implications unresolved at the time of reporting.