Cybersafetyconnection October 14th, 2024, Vol #190 

  • From Konbriefing, there was a cyberattack on the Ministry of Health Kuwait in Kuwait City, Kuwait. 
  • The cyber-attack disrupted systems at several of the country’s hospitals. The Sahel healthcare app was down. The ministry of health’s website was also down.
  • The officials indicated investigations reveal why it happened. 
     
  • No ransomware group has claimed responsibility for the attack. 
  • This how the government of Kuwait took steps to mitigate the loss from cyberattacks. 

What happened? 

Kuwait Ministry of Health 

According to the record media there was a cyberattack on the Ministry of Health Kuwait in Kuwait City, Kuwait. 

Notably, Kuwait’s Ministry of Finance fell victim to the Rhysida ransomware gang exactly one year ago on September 25, 2023.  

In the previous year, the Vice Society ransomware gang targeted several Ikea outlets in Kuwait. Researchers believe this gang may have ties to Rhysida.  

In 2023, a prominent cybersecurity consortium released a recent report. It revealed that more than 117 countries experienced attacks by ransomware gangs. This set a new record. 

 The report tracked a total of about 6,670 ransomware incidents, representing a 73% increase compared to the previous year. 

Who was impacted? 

Ministry of Health Hospitals in Kuwait 

The cyber-attack disrupted systems at several of the country’s hospitals. Additionally, the Sahel healthcare app was affected. The ministry of health’s website was also down. 

Kuwait has a population of over four million. It boasts around 36 hospitals, including 20 public hospitals. It is recognized for having one of the best healthcare systems among Gulf nations. 

Why did it happen? 

The only information we have is that the Officials indicated that an investigation revealed how the hackers infiltrated their systems. 

Which cybercriminal group was responsible? 

Cybercrminals and data breach 

No ransomware group has claimed responsibility for the attack. 

How did the government mitigate loss from the Cyber-attack? 

OWASP Threat and Safeguard Matrix 

After the cyber-attack, the government took the following steps: 

  • Officials have indicated that an investigation revealed how the hackers infiltrated their systems.  
  • They emphasized that they have taken all necessary steps. Their actions ensured the continuity of essential healthcare services in primary healthcare centers and public hospitals. They also aimed to safeguard their data.  
  • The ministry collaborated with relevant government security agencies to contain the problem. They worked to prevent its spread to other systems. They reinforced security systems and implemented updates. These measures help to better combat breaches.
  • The statement claims hackers were stopped from accessing “essential databases.” However, the ministry had to shut down certain systems to install necessary updates.
  • They did not provide a specific timeline for when all systems would be restored. However, they assured us that it would be soon.

From Copilot’s desk, here is how to mitigate loss from cyber-attack for Ministry of Health Kuwait – Kuwait City, Kuwait. 

Mitigating losses from a cyber-attack on the Ministry of Health in Kuwait involves several key steps: 

  • Immediate Response:  

Disconnect affected systems from the network to prevent further spread1. Implement security  protocols and update cyber protection software1. 

  • Backup Systems:  

Utilize pre-prepared backup systems to restore operations at critical facilities2. This ensures  continuity of essential health services2. 

  • Data Integrity:  

Safeguard data integrity by using pre-prepared printed documents and ensuring  that main databases are neither compromised nor encrypted21. 

  • Early Detection:  

Activate early detection systems to identify and respond to cyber threats promptly 

  • Coordination:  

Work with relevant government agencies and cybersecurity experts to investigate the attack and implement long-term security measures2. 

  • Public Communication:  

Keep the public informed about the status of the systems and the measures being taken to restore services. 

Conclusion 

By following these steps, the Ministry of Health can effectively mitigate losses and ensure the continuity of healthcare services. 

Please Subscribe to get the latest blog post.