Cyber Incident Victim: Vall d'Hebron University Hospital
Date:
Feb 2022
Location:
Spain
Summary
A cybersecurity incident at Hospital Vall d'Hebron prompted an investigation into suspected unauthorized access targeting systems linked to its research institute and oncology department. The institution disabled network connections between these entities and restricted external access while urging staff to exercise caution with email usage and account credentials. Though operational details remained limited during the probe, the event reflected broader targeting of healthcare infrastructure by malicious actors.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around February 23, 2022, Hospital Vall d'Hebron in Barcelona initiated an investigation into a suspected cyberattack targeting its research division's systems. As Catalonia's largest hospital, the institution focused its examination on potential compromises within the Vall d'Hebron Institut de Recerca (VHIR) network infrastructure. Hospital management proactively severed network connections between the VHIR and the hospital's oncology institute to contain potential threats. The hospital's communications department acknowledged the cybersecurity incident but declined to provide detailed public statements during the initial investigation phase. Internal sources within the healthcare sector confirmed active forensic analysis of the VHIR network disruptions. Hospital administrators issued precautionary directives to staff regarding email security protocols and credential management, emphasizing vigilance with account access credentials.
The incident positioned Vall d'Hebron among numerous Spanish healthcare institutions targeted by cybercriminals during the pandemic period. While the hospital's clinical operations weren't explicitly reported as affected, the research institute's network isolation reflected containment measures against potential data exfiltration or system compromise. Sector analysts cited in the report noted a 500% increase in hacker attacks against medical facilities since mid-2021, though no specific attribution was made for this incident. The hospital maintained operational continuity for patient services while conducting internal security audits. No patient data breaches or ransomware demands were explicitly confirmed in available reports. The investigation remained ongoing with coordinated efforts between technical teams and external cybersecurity experts at the time of reporting.