Delhi AIIMS cyber attack originated from China, 5 hacked servers successfully retrieved

New Delhi: The All India Institute of Medical Sciences (AIIMS), Delhi cyber attack that crippled the services of the premier institute was carried out by Chinese hackers. Of 100 servers (40 physical and 60 virtual), five physical servers were successfully infiltrated by the hackers but data from them has been successfully retrieved.

The attack on the computer server of All India Institute of Medical Sciences (AIIMS) in Delhi was carried out by Chinese hackers, a senior government source said on Wednesday, adding that data in the five servers have been successfully retrieved now. 

"AIIMS Delhi server attack was by the Chinese, FIR details that the attack had originated from China. Of 100 servers (40 physical and 60 virtual), five physical servers were successfully infiltrated by the hackers. The damage would have been far worse but is now contained. Data in the five servers have been successfully retrieved now," said the source from the Ministry of Health and Family Welfare (MoHFW).

Also Read: Chinese hackers suspected behind AIIMS Delhi cyber attack

AIIMS Delhi first reported a failure in its servers on November 23. Two of the analysts deployed to look after the servers' securities have also been suspended for the alleged breach of cyber security.

AIIMS authorities in a statement issued stated that the e-Hospital data has been restored. "The eHospital data has been restored on the servers. The network is being sanitized before the services can be restored. The process is taking some time due to the volume of data and the large number of servers/computers for the hospital services. Measures are being taken for cyber security," they had said.

"All hospital services, including outpatient, in-patient, laboratories, etc continue to run on manual mode," the statement had said.

Earlier this month, a special cell of Delhi Police launched an investigation into the attack on the computer system at AIIMS Delhi.

According to official sources, a team of the Central Forensic Lab (CFSL) has been pressed into service to check the infected server of the AIIMS Delhi to identify the source of the malware attack.

Also Read: After AIIMS, Delhi's Safdarjung hospital faces cyberattack but not ransomware