Cyberattack on hospitals in Romania: How doctors handled the crisis situation

2026-07-17

In February 2024, the medical system in Romania went through an unprecedented challenge. Over 100 hospitals across the country were the target of a massive cyberattack, which completely blocked the IT platform used for managing patient data.

The attack forced medical units to take immediate measures to protect sensitive information. The order received by medical staff was clear: the immediate disconnection of all computers from the internet. This decision was necessary to stop the spread of the attack and to prevent the loss or theft of medical data.

In the absence of digital systems, hospital activity returned to traditional methods. Doctors, nurses, and administrative staff had to use pen and paper again to record admissions, prescriptions, and patient files. Although this change hindered the workflow, the staff managed to ensure the continuity of medical care and avoid the disruption of patient treatment.

Authorities investigated the incident, highlighting the vulnerability of digital infrastructure to external threats. This event underscored the importance of cybersecurity in public institutions and demonstrated the adaptability of the Romanian medical system in major crisis situations.