Cyber Incident Victim: Kasugai Rehabilitation Clinics
Date:
Jan 2022
Location:
Japan
Summary
A suspected external unauthorized access incident disrupted the medical information systems at Kasugai Rehabilitation Clinics, causing malfunctions in electronic medical records and accounting programs. This led to a temporary shutdown of all servers, significantly impacting patient services and operations. While the breach caused operational disruptions, no personal information leakage was confirmed at the time. The organization publicly apologized for the inconvenience and emphasized ongoing efforts to restore systems and implement countermeasures.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On January 12, 2022, Kasugai Rehabilitation Hospital and its affiliated clinic experienced a suspected external unauthorized access incident targeting their medical information systems. The breach caused technical malfunctions in critical healthcare applications, specifically impacting the electronic medical records system and the medical accounting software. Hospital administrators responded by initiating a full temporary shutdown of all affected servers to contain the potential compromise, resulting in immediate operational disruptions across both facilities. This emergency containment action occurred on the same day as the initial intrusion detection, though the exact timeline between breach identification and system shutdown remains unspecified in public disclosures. The hospital's parent organization, the Youwaikai Medical Corporation, formally acknowledged the incident one week later through a January 19 public notice signed by Director Masako Fukui.
The system outage caused significant service interruptions affecting patient care delivery and administrative operations, though the hospital did not quantify the number of impacted patients or appointments. Hospital management issued a public apology acknowledging the substantial inconvenience caused to patients and partner organizations during the outage period. Forensic investigations conducted through January 19 had not confirmed any unauthorized access or exfiltration of personal information stored within the compromised systems. Technical teams prioritized system restoration and implementation of corrective security measures while maintaining the server shutdown as a precautionary containment measure. The hospital committed to continuing recovery efforts while providing no specific timeline for full service restoration in their initial communication.