Ataque cibernético al Hospital Ciudad Neily, Caja Costarricense Seguro Social, acciones realizadas, 31 de mayo-31 de agosto 2022

Abstract

Objective. Describe the cyberattack and the actions taken to mitigate it, which occurred in the period from May 31 to August 31, 2022, in a peripheral hospital 3 the Hospital Ciudad Neily (HCN) that belongs to the Costa Rican Social Security Fund, in the city of Puntarenas, Costa Rica.  Material and methods. It is cross-sectional observational qualitative research in the period from May 31 to August 31, 2022. Results.  In the HCN, 90% of the servers suffered damage to their information, while in the Costa Rican Social Security Fund (CCSS) approximately 85% of the existing servers suffered damage. In the HCN of the final 315 terminals (computers, tablets, others) 120 (38%) were infected; while in the CCSS of the final 39,650 terminals, 9,600 (27%) were infected. Conclusion. The cyberattack affected end servers and terminals that did not have Microclaudia software, or that did not have it updated; also, those that were on at the time of the attack or during it. The actions to deal with the emergency were determination, assessment, and repercussion of the damages on the day of the cyberattack; implementation of contingency plans to allow attention to users. During the following months, the determination of inputs was made to continue the physical care, cleaning of the equipment to be able to upload the systems and upload of electronic systems. Preventive measures must be taken for future cyberattacks that were determined with experts in the field.