Pitești children's hospital

Profile narrative

Pitești children's hospital is a medical facility located in Pitești, Romania, that focuses exclusively on delivering healthcare services to pediatric patients. As a dedicated children's hospital, its primary mission is to provide medical diagnosis, treatment, and supportive care for infants, children, and adolescents requiring clinical attention. The hospital serves the local population of Pitești and the surrounding communities within Muntenia, offering a range of paediatric services that address both acute and chronic health conditions. Its specialised focus on paediatrics distinguishes it from general hospitals that treat patients of all ages, allowing clinicians to develop expertise in age‑appropriate medical practices.

In February 2024, the hospital was among the first to notice system errors when a widespread ransomware campaign struck healthcare institutions across Romania, signalling the beginning of a significant cyber‑security incident that prompted national alertness. The ransomware exploited vulnerabilities in the Hippocrates medical software platform, using the BackMyData delivery mechanism to encrypt critical files and demand a bitcoin payment for their release. The encryption rendered electronic health records, imaging systems, and administrative databases inaccessible, disrupting routine clinical workflows. Following the detection, the national cyber‑security centre issued an directive for more than 100 healthcare facilities to disconnect from the internet, which forced the hospital to revert to paper‑based records and adopt offline workflows while its IT team collaborated with the software vendor to isolate and neutralise the threat. This precautionary measure was intended to limit lateral movement of the malware and protect unaffected facilities while forensic analysis proceeded. Investigators later determined that a total of twenty‑six hospitals had been compromised by the attack, and after several days of coordinated remediation the affected institutions, including Pitești children's hospital, were able to restore essential systems from secure backups. Restoration efforts involved verifying data integrity and re‑establishing network connections under supervised conditions to ensure that the ransomware did not persist. The restoration process allowed the hospital to resume near‑normal clinical operations, and subsequent monitoring revealed no reports of fatalities or serious patient harm attributable to the cyber‑incident. Clinical staff reported that the temporary shift to paper documentation did not compromise the delivery of essential pediatric services during the recovery period. In the aftermath, the hospital has continued to provide pediatric care while implementing enhanced cybersecurity measures to reduce the risk of similar disruptions in the future, including regular staff training on phishing awareness, updated endpoint protection, and periodic security audits conducted in collaboration with national cyber‑security authorities.

Incidents

1 incident linked to this organisation.