Another hospital hit by ransomware in France, Spain’s public employment service hit with Ryuk, and China’s Cosco Shipping allegedly hacked by LORDBR

Another French hospital, Centre Hospitalier Général d’Oloron, has fallen victim to a ransomware attack. France Bleu reports (translation):

The Oloron Sainte-Marie hospital (Pyrénées-Atlantiques) was the victim of a cyberattack on Monday March 8 in the early afternoon. No application works and a message asking for a ransom of $ 50,000 to be transferred to a bitcoin account paralyzes the entire computer system. No network, external or internal, has been functioning since. A virus detected because all patient files were encrypted on all workstations, such as in the hospitals of Dax or Villefranche-sur-Saône, also victims of last February.

Read more on France Blue.

Meanwhile in Spain, Diego Larrouy and Carlos del Castillo report that Spain’s public employment system was attacked by what appears to be Ryuk ransomware (translation:)

The website of SEPE, the public employment system, is down this Tuesday as a result of a cyberattack that SEPE’s computer systems have received. Sources from the Ministry of Labor indicate that at the moment the origin is unknown and work is being done to raise the service.

[…]

Although the origin of this cyber attack is unknown from Labor, SEPE employees have found that the aforementioned suspicious files had the name ‘Ryuk’. If confirmed, it would be a ransomware- type virus , characterized by encrypting the victim’s files, preventing access to them.

Read more on El Diario.

UPDATE 3:58 PM, March 9:  The following report is now considered as “UNCONFIRMED” and “UNDER INVESTIGATION” because the original source reporting the attack was removed from Splash247.com without explanation. DataBreaches.net has sent an inquiry to Cosco and will update this when a response is received or more information becomes available:

And finally (for now, anyway), in other hacking-related news, Cosco Shipping, the world’s third largest container line, has had its email system compromised, allegedly by the Brazilian hacker known as LORDBR.  Cosco Shipping is headquartered in China. MBW has the story.

Great thanks to @Chum1ng0 for sending these in.

About the author: Dissent

2 comments to “Another hospital hit by ransomware in France, Spain’s public employment service hit with Ryuk, and China’s Cosco Shipping allegedly hacked by LORDBR”

You can leave a reply or Trackback this post.
  1. Mark Lester - March 9, 2021

    do you have any additional sources to corroborate the event? the story referenced at splash247.com is no longer available. I queried them yesterday for additional information and the article was removed shortly thereafter. I’m simply looking to verify whether it happened or not. I am hearing it may just be a rumor.

    • Dissent - March 9, 2021

      Great question. I don’t see any other source. I’ve sent an inquiry to Cosco and will put a note on the post for now that the claim is under investigation as the original source was removed without explanation. If you find out more, please let us know.

Comments are closed.