AIIMS Cyber Attack: Delhi Police Write To CBI, Seek IP Addresses Of China, Hong Kong-Based IDs

Delhi Police has asked the CBI to get the details of the IP addresses of email IDs from Interpol.

AIIMS Delhi faced a cyber attack last month which, the government said, originated in China

Source : Getty Images

The Intelligence Fusion and Strategic Operations (IFSO) unit of Delhi Police has written to the Central Bureau of Investigation (CBI) asking them to get details from Interpol about the IP addresses of the email IDs from Henan in China and Hong Kong that were used to launch the cyber attack on AIIMS, Delhi.

Delhi Police said that since CBI is the nodal agency, the letter has been written to them, reported ANI citing Delhi Police.

AIIMS Delhi server attack | IFSO of Delhi Police writes to CBI asking them to get details from Interpol about IP addresses of the email IDs from Henan in China& Hong Kong that were used to launch the cyber attack. Since CBI is the nodal agency,letter written to them: Delhi Police

— ANI (@ANI) December 18, 2022

Government's Statement On AIIMS Cyber Attack

Earlier on Wednesday, the Ministry of Health and Family Welfare (MoHFW) said that the ransomware attack on the servers of the AIl India Institute of Medical Sciences in Delhi originated in China. As per the ministry, out of 100 servers of the hospital, of which 40 were physical and 60 virtual, five physical servers were infiltrated by hackers but data from them has been successfully retrieved.

"AIIMS Delhi server attack was by the Chinese, FIR details that the attack had originated from China. Of 100 servers (40 physical and 60 virtual), five physical servers were successfully infiltrated by the hackers. The damage would have been far worse but is now contained. Data in the five servers have been successfully retrieved now," ANI said quoting a source from the Ministry of Health and Family Welfare said.

The Cyber Attack And Aftermath

Last month, AIIMS Delhi faced a cyber attack, compromising its servers. A case of extortion and cyber terrorism was registered by the IFSO unit of the Delhi Police on November 25. Two of the analysts assigned to monitor the security of the servers have also been suspended for the alleged violation of cyber security.

AIIMS authorities in a statement issued stated that the e-Hospital data has been restored. "The eHospital data has been restored on the servers. The network is being sanitized before the services can be restored. The process is taking some time due to the volume of data and the large number of servers/computers for the hospital services. Measures are being taken for cyber security," they said.

Investigation

The National Investigation Agency (NIA) had been investigating the ransomware attack on the servers of AIIMS Delhi.

Along with the NIA, the Ministry of Electronics and Information Technology and Delhi Cyber ​​Crime Cell, Indian Cyber ​​Crime Coordination, Intelligence Bureau, Central Bureau of Investigation (CBI) are also probing the cyber attack.