Ransomware cyber-attack disrupts medical record access at hospital in Busan's Saha District
A specialist spine and joint hospital in Saha District, Busan, experienced disruption to its IT systems following a ransomware cyber-attack on 2 November 2026. With around a year's worth of medical records, patient information, and test and prescription data inaccessible, new inpatient admissions and discharge billing were also disrupted. The attackers demanded a large sum in Bitcoin to restore the data, and the hospital undertook recovery work.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Ransomware
- Occurred / detected
- 2026-11-02
- Scale of damage
- Access to around a year's worth of medical records and other data disrupted; new inpatient admissions and discharge billing affected
- Cause / method
- Ransomware cyber-attack
- Location
- South Korea
Timeline
- A ransomware cyber-attack disrupted the hospital's IT systems, preventing access to patient information and medical records.
- It emerged that recovery work was under way at the hospital and that the attackers had demanded a large sum in Bitcoin.
- It was disclosed that the data available for recovery only went up to 11 September of the previous year.
6 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.