Health Care and Social Assistance

The organisation operates as a healthcare provider within the Health Care and Social Assistance sector, with its headquarters located in Italy. It delivers a range of medical services to the population of the Umbria region, including inpatient hospital care and outpatient consultations. Its facilities host clinical laboratories that perform diagnostic testing for patients and support public health initiatives. The organisation also maintains an emergency department that handles urgent medical cases and trauma. During the COVID‑19 pandemic it contributed to regional testing and vaccination programmes.

A distinguishing feature of the organisation is its integration of laboratory services directly with hospital operations, enabling rapid turnaround of test results for clinicians. Its role in pandemic response highlighted its capacity to mobilise swab testing and vaccination sites alongside routine clinical work. The provider relies heavily on interconnected IT systems to manage patient records, schedule appointments, and coordinate laboratory workflows. This dependence on digital infrastructure makes the continuity of its services particularly sensitive to cyber disruptions. Consequently, the organisation places importance on incident response planning and collaboration with external authorities when cyber threats arise.

On 11 April 2021 the organisation experienced a ransomware attack that encrypted files on its IT networks and disrupted multiple systems. The intrusion affected administrative functions, clinical operations, laboratory services, infrastructure servers, and hospital activities, causing noticeable slowdowns across the organisation. Detection occurred early on a Sunday morning, prompting the IT team to engage law enforcement to contain the threat and begin mitigation. While essential pandemic‑related services such as swab testing and vaccinations continued to operate, other services were degraded until partial restoration of laboratory and emergency department capabilities was achieved later that day. The organisation’s IT staff continued working to fully restore systems and issued a public apology for the inconvenience experienced by patients.