Serviço de Saúde da Região Autónoma da Madeira

Summary

A deliberate and malicious cyber-attack disrupted the normal functioning of the regional health service, compromising some internal areas and limiting access to clinical data across hospitals and health centers. The service gradually restored computer equipment and clinical data access, prioritizing urgent care facilities before extending the process to other areas, with one health center completing full access first. All professionals and users of one hospital were scheduled for testing, while testing was already underway at two other facilities. Users were advised to bring any personal health information they possessed and to use the national health service mobile application for access to usual medication prescriptions.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

SESARAM confirmed that it had been the target of a deliberate and malicious cyber-attack with the sole objective of causing damage and disrupting the normal functioning of the Regional Health Service of the Autonomous Region of Madeira. The organization stated that the internal functioning of SESARAM was affected and that some areas were compromised as a result. An update on the state of play was issued following the cyber-attack on the 6th, describing the situation at Hospital dos Marmeleiros in Funchal. The hospital began to have progressive access to clinical data as part of the recovery effort. SESARAM explained that work was proceeding gradually and only within what was technically possible to provide hospitals and clinical services with computer equipment capable of accessing clinical data. Prioritization had initially been given to health centers with Urgent Care Service before the process was extended to other areas. The Health Center of Porto Santo was the first health unit to achieve full access, completing a process that had already established generalized access. These developments were communicated in an afternoon statement on August 1, 2023, marking the latest stage in the organization's response to the disruption.

SESARAM issued two specific appeals to users of the regional health system during the recovery period. Individuals attending a SESARAM health unit were asked to bring any medical information they had in their possession. Users of the SNS mobile application were asked to use the application to provide access to the prescription of usual medication. Testing was arranged for all professionals and users of Hospital Dr. Nélio Mendonça. At Hospital dos Marmeleiros and Hospital Dr. João de Almada, testing was already underway. Precautions were required across the network, and people in need of care were advised to go to health centers and hospitals operated by SESARAM. The progressive restoration of clinical data access at Hospital dos Marmeleiros represented a concrete step toward restoring normal operations. Some areas of the health service remained compromised while the technical recovery continued. These actions and impacts defined the immediate response to the cyber-attack on Madeira's regional health service.

Sources

Sources available to members: 2 sources.