Cyberattack on Arwini May Have Affected Data in Up to 80,000 Records
Summary
Arwini and KVN confirmed a cyberattack discovered May 4. Up to 80,000 anonymized records may be affected, but investigators have not established whether or how many were accessed; systems were shut down and the incident reported.
Key points
- Arwini said it discovered indications of a cyberattack on its server in early May; KVN confirmed the incident.
- Up to 80,000 anonymized records may be affected, potentially including patient contact, health and billing information.
- It remains unclear whether data were accessed, which data may be involved, or how many records were affected.
- KVN said all systems were shut down after the attack was discovered on May 4.
- The incident was reported to the state criminal police and data protection authority; police and external security experts are investigating.
- KVN said the incident has not disrupted the work of medical practices in Lower Saxony.
Article Details
- Victim Organization
- Arbeitsgemeinschaft Wirtschaftlichkeitsprüfung Niedersachsen (Arwini)
- Incident Type
- Cyberattack on Arwini's server; possible data access or exfiltration remains unconfirmed.
- Data Types Exposed
- Contact data (potentially affected)
- Health data (potentially affected)
- Billing information (potentially affected)
- Affected Records
- Up to 80,000 anonymized datasets were potentially affected; whether any data were accessed or exfiltrated, and how many, remains unclear.
- Operational Impact
- All systems were immediately shut down after the possible attack was discovered. The KVN reported no effect on the daily work of physician practices; prescriptions could continue to be issued as usual.
- Ransom Or Extortion
- Attackers reportedly left a message. Their motive is unknown, and no ransom demand or extortion activity was reported.
- Claim Status
- alleged