Všeobecná zdravotná poisťovňa

Summary

Všeobecná zdravotná poisťovňa experienced a massive cyber attack, including a targeted denial‑of‑service attempt, which it repelled without any breach of insured persons’ data. The attacker’s aim was to disrupt IT infrastructure, data and services, but the company’s data remained highly protected and multi‑layered backups ensured no loss, while healthcare provision stayed unaffected. As a precaution, electronic services such as the mobile app and e‑prescription platform were temporarily suspended, and ongoing attack attempts prompted the insurer to maintain heightened security monitoring.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On Friday, 24 January 2025, Všeobecná zdravotná poisťovňa became the target of a massive cyber attack. The attack was identified as a targeted denial-of-service attempt that occurred around noon. The stated objective of the attackers was to disrupt the insurer’s IT infrastructure, data and services. Despite the attack, VšZP confirmed that no personal data of its insured persons was leaked or compromised. The organization emphasized that its data remain highly protected and that healthcare services were not endangered. VšZP highlighted its ongoing focus on the processing and storage of health information, noting that it pays maximum attention to data protection. The insurer said it continuously monitors the rising trend of cyber threats and has implemented a set of security measures. Thanks to those precautions, VšZP stated it was able to repel the attack and safeguard the data of its insured persons.

In the days following the initial incident, VšZP reported that cyber attacks continued against its systems. As a preventive measure, the insurer temporarily disabled certain electronic services on 29 January 2025. Specifically, VšZP suspended its mobile application and the eRecept service for operational and preventive reasons. The organization reiterated that cybersecurity remains an absolute priority for it. VšZP affirmed that the personal data of its insured persons continue to be protected and that healthcare provision is not at risk. The insurer maintained its commitment to monitoring threats and strengthening its defensive posture.

The incident resulted in no data breach, but led to temporary unavailability of some online services for users. VšZP’s response included ongoing monitoring, activation of pre‑existing security controls, and the precautionary suspension of specific digital channels. Throughout the episode, the insurer consistently communicated that the confidentiality, integrity and availability of insured data were preserved. No further details about the attackers or the exact duration of the disruption were disclosed in the available sources.

Sources

Sources available to members: 1 source.