Cyberattack on Romanian hospitals: How doctors handled the crisis situation

2026-07-19

In February 2024, the medical system in Romania faced an unprecedented challenge. More than 100 hospitals across the country were the target of a massive cyberattack, which completely blocked the IT platform used for managing patient data.

The attack paralyzed the activity of the medical units, forcing medical staff to take immediate measures to protect sensitive information. The order received by employees was clear: immediate disconnection of all IT systems from the internet to stop the spread of the attack and prevent data loss.

Lacking access to computers and electronic files, doctors and nurses were forced to return to traditional working methods. For several days, hospital activity was carried out exclusively on paper, using pens to record patient charts, prescriptions, and test results.

This situation demonstrated the vulnerability of digital infrastructure in the face of external threats. Authorities investigated the incident, indicating the involvement of hacker groups, and the event highlighted the urgent need to strengthen cybersecurity in public institutions in Romania.

Although the crisis period was difficult, the medical staff managed to maintain the continuity of patient care. The experience served as an important lesson for the healthcare system, highlighting the importance of preparation for emergency situations in the digital age.