CSIDB logo
Incident

Dax-Côte d'Argent Hospital

Incident posture

Attack window
Feb 2021
Location
France
Status
Historical
CIA posture
Available to members
Updated
2025-12-16 00:00

Linked entities

Victim
Dax-Côte d'Argent Hospital
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Feb 2021
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A large-scale cyber attack targeted Dax Hospital, disrupting telephone communications and rendering its entire information system inoperable through data encryption. The incident forced the hospital to suspend critical services while teams worked urgently to restore operations, prompting an immediate crisis meeting to address the widespread technical outage. The organization publicly acknowledged the attack and ongoing recovery efforts but did not specify the perpetrators or whether patient data was compromised.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On February 9, 2021, the Dax hospital center in France experienced a major cyber attack that severely disrupted its operations. The incident became apparent by midday when external parties could no longer reach the facility through telephone lines, indicating widespread system failures. Hospital administrators publicly acknowledged the crisis via their official Twitter account, confirming a large-scale cyber attack was underway and stating their teams were working to restore normal operations as quickly as possible. The attack employed data encryption techniques that rendered the hospital's entire information system inoperable, affecting critical infrastructure and services. This complete shutdown of digital systems created immediate operational challenges across the facility.

A crisis meeting was convened in the early afternoon to coordinate the institutional response to the attack. The hospital's statement explicitly identified the encryption-based nature of the incident, though no specific ransomware group or motive was disclosed in available reporting. The information system outage persisted throughout the day, with restoration efforts ongoing as publicly communicated. The attack caused significant service interruptions, though the exact scope of affected medical systems and potential patient care impacts weren't detailed in initial reports. Hospital staff continued working to mitigate the situation, focusing on system recovery while managing operational disruptions caused by the encrypted infrastructure. No further details about containment measures, data compromise, or forensic findings were available in the immediate aftermath reporting.

Sources

Sources available to members: 1 source.

CSIDB