Serangan Siber Ransomware, Berdampak pada Pelayanan RS Dharmais

Summary

The script highlights the impact of a ransomware attack, specifically the W Cry virus, on Indonesia's Dharmais Cancer Hospital, which has led to delays in patient services like registration and billing. Despite ongoing efforts to resolve the issue, many services remain offline, causing frustration among patients. The government and local authorities are on high alert as the virus evolves, with experts warning of the threat posed by new, more advanced versions. The situation underscores the urgent need for enhanced cybersecurity measures to protect critical data and systems across various sectors.

Takeaways

• 😀 The W Cry ransomware attack has severely disrupted computer systems at Rumah Sakit Dharmais, a major hospital in Indonesia, affecting patient services.
• 😀 Patients have reported long wait times due to manual verification processes, as the hospital’s online systems remain down.
• 😀 Around 70% of the hospital's computer systems are still non-operational, impacting the registration, inpatient admission, and cashier services.
• 😀 The hospital’s management is holding meetings with the board of directors to determine how to resolve the ongoing ransomware issue.
• 😀 Despite efforts to restore systems, it is unclear when normal operations will resume at Rumah Sakit Dharmais.
• 😀 The W Cry ransomware attack has also affected government institutions, with regions like Surabaya taking precautionary measures, including disabling internet access to prevent further spread.
• 😀 A new version of the W Cry malware, which doesn’t require user interaction to spread, is now circulating, heightening concerns about future attacks.
• 😀 Experts warn that the hackers behind the ransomware will not stop until their goals are achieved, as the malware continues to evolve.
• 😀 Government agencies and institutions have been actively backing up critical data and implementing measures to mitigate the virus's impact.
• 😀 The government, alongside cybersecurity experts, is focused on preventing further attacks by adapting to the changing nature of the malware and ensuring the security of vital services.
• 😀 Experts emphasize the need for continued vigilance and proactive measures to prevent future ransomware attacks, especially as the malware’s sophistication increases.

Q & A

What is the impact of the ransomware attack on Rumah Sakit Dharmais?

The ransomware attack at Rumah Sakit Dharmais has severely disrupted their computerized systems, leading to delays in patient services, especially in registration for inpatient care, BPJS registration, and cashier services. Patients have experienced long waiting times as data verification is being processed manually.

How is Rumah Sakit Dharmais handling the situation after the ransomware attack?

Currently, about 70% of the hospital's 600 computers are still affected by the ransomware attack. Rumah Sakit Dharmais has not provided a full solution yet and is holding meetings with the board of directors to determine the next steps. They are continuing manual operations in the meantime.

How long are patients experiencing delays in the hospital?

Patients are experiencing significant delays, with some waiting for several hours. For example, a patient who arrived at 8:00 AM was still finishing the process at around noon, while some new patients have faced similar long wait times due to the manual verification process.

What was mentioned regarding the possibility of restoring online services at the hospital?

The hospital management has informed that they are working towards restoring the system and expect to resolve the issues within 2 to 3 days, aiming to return to normal service operations soon.

Has there been any official communication from the hospital about the ransomware attack?

Yes, the hospital has placed banners notifying patients about the computer system issues caused by the ransomware attack. However, they have not given further specific details about the timeline for resolution as they are still in discussions with their board.

What measures were taken by the Indonesian government regarding the ransomware attack?

The Indonesian government, through the Badan Pusat Statistik (BPS), ensured that their data was secure and took preventive measures by backing up their data in anticipation of the ransomware attack. Similar steps have been taken by other institutions such as local government bodies.

How are other regions in Indonesia, such as Jawa Timur, responding to the ransomware threat?

In Jawa Timur, several government institutions have temporarily disabled internet access to prevent further malware attacks. However, the government of Surabaya has reactivated its online services after confirming the situation was under control.

What are the main concerns regarding the evolving versions of the W Cry ransomware?

The main concern is that newer versions of the W Cry ransomware (such as version 3) spread automatically without requiring user intervention, unlike earlier versions. This makes the virus harder to detect and mitigate.

What solutions have been suggested by cybersecurity experts to prevent further attacks?

Experts recommend disabling certain features in Microsoft systems, such as SMB (Server Message Block) and macros, to reduce the risk of malware spreading. They also emphasize the need for institutions to regularly back up their data to avoid loss.

What is the risk to government and financial institutions from the W Cry ransomware?

There is a significant risk to government institutions and financial sectors, as the ransomware could target critical databases and systems. If these systems are compromised, it could cause widespread disruption to public services and financial operations, leading to a national crisis.