Helse Sør-Øst RHF

Helse Sør-Øst RHF, also known as Health South‑East RHF, is a regional health authority that manages hospitals in Norway’s southeastern region. The organisation’s primary responsibility is to oversee the operation of these hospital facilities and to ensure the delivery of inpatient and outpatient care. As a statutory body, it translates national health policy into regional service plans and monitors performance against quality standards. Its core activity consists of providing the hospital services that constitute the backbone of specialised healthcare for the population living in its catchment area.

The organisation serves approximately 2.9 million individuals, a figure that represents more than half of Norway’s total population. Its headquarters are situated in Norway, although the specific city is not disclosed in the available sources. This large service footprint makes Helse Sør-Øst RHF one of the largest regional health authorities in the country by population covered.

In January 2018 the organisation experienced a significant data breach when suspicious network traffic was detected on its systems, an activity attributed to an advanced and professional threat actor. The breach raised concerns that sensitive healthcare data of up to 2.9 million people might have been exposed, prompting immediate containment measures. Internal IT teams, the Norwegian computer emergency response team HelseCERT, and law‑enforcement authorities launched investigations to determine the scope and origin of the incident. Security researchers later criticised the organisation for issuing premature assurances about data safety before the full extent of the breach was known. Investigations conducted by the authorities concluded that a previously contracted third‑party IT modernization project was not involved in the attack. The parent company, Sykehuspartner HF, confirmed that unauthorized access had indeed occurred.

Helse Sør-Øst RHF operates as a subsidiary of Sykehuspartner HF, which is the parent entity that confirmed the unauthorized access during the 2018 incident. The organisational structure places it within Norway’s public health sector, where it is accountable to both regional stakeholders and national health authorities. This relationship defines its governance, funding mechanisms, and oversight responsibilities.