Report: German hospital cyberattack trail leads to Russia

BERLIN (AP) — IT experts investigating a cyberattack that paralyzed computer systems at a major hospital in western Germany say one of the trails they are following leads to Russia, German media reported Tuesday.

The attack caused the failure of IT systems at Duesseldorf’s University Hospital two weeks ago. A woman who needed urgent admission died after she had to be taken to another city for treatment.

Authorities in North Rhine-Westphalia told state lawmakers that the software used to encrypt computer systems in an apparent ransom attempt originates with a Russian hacker group, public broadcaster WDR reported.

WDR quoted investigators as saying that the attack “may have been part of a worldwide, commercial malware campaign.” Authorities previously said the attackers exploited a weak spot in “widely used commercial add-on software,” which they didn’t identify.

The attackers appeared to have intended to target the Heinrich Heine University, to which the Duesseldorf hospital is affiliated, and not the hospital itself. When Duesseldorf police established contact and said the hospital, and not the university, had been affected, endangering patients, the perpetrators withdrew their extortion attempt and provided a digital key to decrypt the data.