‘It’s getting worse’: Irish hospital hack exposes EU cyberattack vulnerability

Hackers infiltrated Ireland's health care system, prompting a shutdown. It’s not the only target.

‘It’s getting worse’: Irish hospital hack exposes EU cyberattack vulnerability

Ireland’s health care system was effectively shut down on Friday, and experts suggest Europe had it coming.

The cyberattack affected most of the country’s health services, including coronavirus testing, maternal care services, cancer care, COVID-19 tracking and routine referrals for secondary care. One government minister called it the “most significant cybercrime on the Irish state,” according to the Irish Times.

The attack follows similar attacks on healthcare services elsewhere in Europe, including the U.K., Finland and France, and comes the same week as an attack on an oil pipeline in the U.S. that prompted widespread gas shortages across the country.

But cybersecurity experts said the worst is yet to come for Europe’s critical services.

“It’s getting worse, and it’s getting worse quicker,” said Mikko Hyppönen, the chief research officer at F-Secure, a Finnish cybersecurity company. While it is unclear what specific vulnerabilities were exploited in Ireland’s case, Hyppönen said health care systems are particularly vulnerable to such attacks.

“The root cause of the biggest outages of medical systems are the use of legacy systems. There is generally a lack of budget to replace old machines by new ones. The old ones are too slow to run new operating systems, so they keep on running old versions,” he added.

Cyberattacks on health care systems have risen significantly since the pandemic began last year. One trend is criminals taking over servers, stealing personal data, and then charging money to allow officials to get back in and threatening to sell the data online — a kind of attack known as ransomware. Group-IB, a cybersecurity firm, said ransomware attacks grew by 150 percent in 2020.

In October, a hacker blackmailed tens of thousands of Finnish patients after their therapy notes were stolen from a counselling center. In France, two hospital groups were hit the same week in February. A Russian criminal gang was suspected when dozens of U.S. hospitals were attacked last year.

“The attack on the Irish health system is yet another indication of how ransomware operators are always on the move – improving, automating and becoming more effective at targeting larger and larger organisations,” says Paul Donegan, country manager for Ireland for cybersecurity company Palo Alto Networks.

There appear to be few easy fixes. An overhaul of cyber networks is expensive and it takes time.

Lukasz Olejnik, an independent cybersecurity researcher and consultant, said: “Investigation and precautionary measures may be disruptive.”

“Even if the direct impact of the infection turns out to be minimal, systems are disrupted nonetheless,” he added.

But an overhaul is exactly what the EU is trying to mandate. The European Commission in December proposed an update of its cybersecurity rules, known as the Network and Information Security directive, that would require many industries, including health care, to beef up their cyber defences or face millions in fines.

But the bill is months, if not years, away from getting finalized, even as attacks themselves become increasingly sophisticated and more audacious.

Hyppönen, at F-Secure, said it will take more attacks like the Irish one for people to respond to the threat.

“The biggest difference comes when companies and organizations see what happens with their own eyes. We need disasters to happen around us for organisations to make a real change,” he said.

Leonie Cater and Vincent Manancourt contributed reporting.

Want more analysis from POLITICO? POLITICO Pro is our premium intelligence service for professionals. From financial services to trade, technology, cybersecurity and more, Pro delivers real time intelligence, deep insight and breaking scoops you need to keep one step ahead. Email pro@politico.eu to request a complimentary trial.
Source : Politico EU More   

What's Your Reaction?


Next Article

DUP picks hard-liner as leader to battle Northern Ireland protocol

Edwin Poots narrowly won a vote among party lawmakers on Friday.

DUP picks hard-liner as leader to battle Northern Ireland protocol

The Democratic Unionist Party on Friday elected a new hardline leader, Edwin Poots, who vows to overturn the Brexit trade deal’s Irish protocol — even if this means shaking the foundations of the Northern Ireland peace settlement.

Poots barely defeated the party’s House of Commons leader, Jeffrey Donaldson, in a 19-17 vote Friday among party lawmakers. The narrow outcome reflected longstanding divisions between the party’s centrist and Christian evangelical wings.

His victory will be welcomed by rival political forces that hope to topple the Democratic Unionists as the top party in the next Northern Ireland Assembly elections. 

Donaldson had been viewed as the dull but smooth candidate more likely to position the DUP as a broader church capable of retaining relatively liberal unionists within its ranks.

Poots, by contrast, is noted for moments of blunt-spoken bigotry such as blocking blood donations by gay people and claiming that Catholics were much more likely to catch COVID-19. Like most DUP lawmakers, he opposes same-sex marriages and abortion, both policies imposed on Northern Ireland by U.K. legislation.

His win leaves unclear who will succeed Arlene Foster as first minister, the leader of Northern Ireland’s five-party government. Poots led the internal push to oust Foster — but doesn’t want to hold the first minister post.

Shift to the right

The leading candidate to become government leader instead is Poots ally Paul Givan, who was seen entering the DUP’s headquarters in Protestant east Belfast shortly after Poots’ victory speech Friday night.

Both politicians are members of an openly anti-Catholic sect, the Free Presbyterian Church of Ulster, founded by the DUP’s late founding father Ian Paisley. Both are strict biblical creationists who believe the Earth is only 6,000 years old, fossils are fake and evolution is a fraud.

Poots, who didn’t take questions from the victor’s podium, said he was determined to minimize European Union-required checks on goods arriving at Northern Ireland ports from Britain. That U.K.-splitting outcome of the Brexit trade deal has enraged many unionists.

He vowed to build common cause with other unionist groups to deliver “an end” to the protocol.

“I want to see unionism working together,” he said. “The Northern Ireland protocol has proven to be a massive challenge for us. If we are to fight this, to ensure that everybody in Northern Ireland is not worse off as a consequence of the protocol, then it’s for us to do that together.”

Hostility to the protocol proved politically fatal for Foster, who was forced to resign last month as DUP leader amid rank-and-file unhappiness over her initial lukewarm acceptance of the protocol. She noted that the arrangement would be good for Northern Ireland manufacturers, who uniquely could export barrier-free both to Britain and the 27-nation EU. 

But such arguments faded with the sudden January imposition of EU controls on goods arriving from Britain. This unsettled Northern Ireland society as confused suppliers canceled normal shipments and stocks on store shelves temporarily thinned. 

The episode underscored how dependent the region’s lackluster economy is on British supply chains now subject to bureaucratic delays, restrictions and higher costs. Anti-protocol tensions fueled 10 days of April rioting by working-class Protestants, many of whom derided the DUP for permitting a new regime that makes it easier to trade with the Republic of Ireland than with Britain.

Poots last month mocked Foster’s initial pro-protocol comments as “like bragging about your side’s wonder goal when you’ve just been hammered 6-1.”

Yet as Northern Ireland’s agriculture minister, Poots was most responsible locally for rolling out the new checks on British goods at the ports — a point seized upon by Donaldson’s supporters.

Need for cooperation

Nominating another hard-liner for the first minister’s post would pose an immediate test for the resiliency of power-sharing, the central goal of Northern Ireland’s Good Friday peace accord of 1998.

While DUP lawmakers pick their own leader, all parties must approve appointments to the Northern Ireland administration, most importantly the DUP’s polar opposites from the Irish nationalist Sinn Feín party. 

A refusal to accept Poots’ nominee as the new government leader could quickly trigger the collapse of the Northern Ireland Assembly, as last happened in January 2017 when DUP-Sinn Féin relations reached toxic levels. Power-sharing was restored only 16 months ago.

Politicians from other parties told POLITICO it would be a mistake to write off Poots as an irredeemably divisive force. They noted that Poots himself, while a sometimes clumsy speaker given to sectarian and misogynistic soundbites, has personal charm and good behind-the-scenes relations with Sinn Féin figures.

They note that Poots’ fundamentalist politics are tied closely to the late Ian Paisley, who spent decades calling for Sinn Féin and its Irish Republican Army allies to be “smashed” — only to stun the world by forming an effective government with them in 2007.

“If Ian Paisley can surprise us,” one Assembly member said, “perhaps Poots can too.”

Sinn Féin leader Mary Lou McDonald said she hoped Poots would take steps to strengthen Northern Ireland’s fragile government, not provoke her party. An immediate fight looms on whether the DUP will stop blocking an Irish Language Act, a longtime Sinn Féin demand.

“Sinn Féin wants power sharing to work,” she said. “We are strongly committed to making our political institutions work so that we can create a better, fairer and more equal society for all.”

DUP lawmakers noted that, moments after Poots’ victory, the party elected its most liberal Assembly member to be his deputy leader: north Belfast representative Paula Bradshaw.

“The result isn’t necessarily the party moving to the right,” said one DUP Assembly member, who told POLITICO he voted for Poots even though he thinks Donaldson is more competent and professional. “The clearest message from this vote is that we want change.” 

Source : Politico EU More   

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies.