Cyberattack on hospitals in Romania: How doctors handled the crisis situation

2026-07-20

In February 2024, the medical system in Romania went through an unprecedented situation. Over 100 hospitals across the country were the target of a massive cyberattack, which completely blocked the operation of the IT platforms used for managing patient data.

The attack was caused by a group of hackers who managed to encrypt the databases of the healthcare units. Following this incident, medical staff received an urgent order to disconnect from the internet to prevent the security breach from spreading and to protect sensitive patient information.

To ensure the continuity of medical care, doctors and nurses were forced to return to traditional working methods. For several days, all medical records, prescriptions, and appointments were filled out manually, using only paper and pen, a major challenge for a system accustomed to digitalization.

Romanian authorities intervened quickly to isolate the attack and safely restore the IT systems. The incident highlighted the vulnerabilities of the digital infrastructure in the public sector and underscored the need for much stricter cybersecurity measures in the future.

This experience demonstrated the adaptability of medical staff under difficult conditions, but it also served as a wake-up call for state institutions. Protecting digital data now remains a national priority to prevent the recurrence of such situations that can jeopardize the proper functioning of hospitals.