Cyberattack on hospitals in Romania: How doctors handled the crisis

2026-07-14

In February 2024, the medical system in Romania went through an unprecedented challenge. Over 100 hospitals across the country were the target of a massive cyberattack, which completely blocked the operation of the information systems used for managing patients and medical data.

Immediately after detecting the security breach, authorities issued an urgent order to disconnect all equipment from the internet. This measure was necessary to stop the spread of the attack and to protect the rest of the computer networks, but it left medical units in a critical situation, without access to patients' electronic records.

To ensure the continuity of medical care, doctors and auxiliary staff were forced to return to traditional working methods. For several days, hospital activity was carried out exclusively on paper, using pens to record patient files, prescriptions, and test results, while teams of cybersecurity specialists worked to resolve the issue.

This incident highlighted the vulnerability of the digital infrastructure in the public sector and the importance of preparation for emergency situations. The authorities subsequently launched an extensive investigation to identify the source of the attack and to implement stricter security measures, intended to prevent such incidents in the future.

Currently, the situation in the affected hospitals has returned to normal, and the information systems are operational again. However, the event remains a benchmark for Romania's digitalization, underlining the constant need for investment in technology and the protection of sensitive data.