Cyberattack on hospitals in Romania: How the medical system was affected

2026-07-15

In February 2024, the medical system in Romania went through an unprecedented crisis. Over 100 hospitals across the country were the target of a massive cyberattack, which completely blocked the digital activity of the healthcare units.

The attack was caused by a "ransomware" virus, which encrypted hospital databases, making it impossible for doctors to access patients' electronic records. Following this incident, medical staff had to return to traditional working methods, using pen and paper to record patient information and prescribe necessary treatments.

Romanian authorities intervened immediately to limit the damage. The order received by the hospitals was clear: disconnect all systems from the internet to prevent the spread of the attack and to protect data that had not yet been affected. Cybersecurity specialists worked intensively to restore the normal functioning of the IT platforms.

This event revealed the vulnerabilities of the healthcare IT system and highlighted the importance of investments in digital security. Although hospital activity was severely disrupted, doctors managed to continue patient care, demonstrating adaptability under difficult conditions.

Currently, authorities are continuing investigations to identify the source of the attack and to strengthen protection measures. The incident remains a reference point in the recent history of Romania's digitalization, highlighting the risks to which public institutions are exposed in the technology era.