Cyber Incident Victim: Boston Children's Hospital
Date:
Apr 2014
Location:
United States of America
Summary
Anonymous conducted distributed denial-of-service attacks against Boston Children's Hospital and a related facility, disrupting website operations and temporarily limiting patient and staff access to online accounts, medical records, and appointment systems, though no internal data was compromised. The attacks were part of #OpJustina, a campaign demanding the termination of a physician involved in a controversial custody case involving disputed medical diagnoses of a minor patient. While some Anonymous affiliates later urged cessation of attacks due to targeting a healthcare institution, the patient's potential reunification with her family progressed alongside independent legal and advocacy efforts, with no confirmed causal link to the hacktivist actions.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
The incident involving Boston Children's Hospital began with a custody dispute over 15-year-old Justina Pelletier, who had been held as a state ward since 14 February 2013 after hospital physicians diagnosed her condition as psychiatric rather than physical. Her parents contested the diagnosis of somatoform disorder by Dr. Alice W. Newton, which replaced Tufts Medical Center's mitochondrial disease treatment plan. When the Pelletiers attempted to discharge Justina to resume prior care, Boston Children's Hospital filed a 51A abuse report, leading to strict visitation limits, gag orders, and state custody at Wayside Youth and Family Support Network. Public outrage over these restrictions intensified through early 2014, culminating in Anonymous launching #OpJustina on 23 April 2014 via a YouTube video demanding Justina's release, Dr. Newton's termination, and judicial protests.
Anonymous claimed responsibility for prior disruptions to Wayside Youth's website in March/April 2014, causing limited operational interruptions. Between 19-23 April 2014, multiple DDoS attacks targeted Boston Children’s Hospital’s web infrastructure, though no patient data or internal systems were breached. The hospital proactively disabled certain public-facing pages to mitigate attacks, inadvertently restricting patient/medical staff access to online accounts, test results, and appointment systems. While Anonymous publicly threatened the hospital in manifestos citing "unbridled wrath," the Boston Globe noted no direct forensic evidence linking the group to the DDoS incidents. On 25 April 2014, the prominent Anonymous-affiliated account @YourAnonNews urged cessation of attacks given the hospital’s critical nature, sparking internal dissent among supporters. Concurrently, Massachusetts health officials and legislators advanced plans to return Justina to Connecticut, with a state health official confirming a drafted reunification plan by 25 April 2014. The hospital maintained operational continuity despite service disruptions, and no further cyber incidents were reported after Anonymous’s internal divisions surfaced.