Government sources claim that China was behind AIIMS Delhi server attack; data from 5 servers was securely recovered

Chinese hackers were responsible for the attack on the AIIMS computer system in Delhi, a top government source claimed on Wednesday, adding that the data on the five servers has now been completely recovered.

“AIIMS Delhi server attack was by the Chinese, FIR details that the attack had originated from China. Of 100 servers (40 physical and 60 virtual), five physical servers were successfully infiltrated by the hackers. The damage would have been far worse but is now contained. Data in the five servers have been successfully retrieved now,” said the source from the Ministry of Health and Family Welfare (MoHFW).

On November 23, AIIMS Delhi announced a server failure for the first time. Due to the suspected cyber security breach, two of the analysts assigned to monitor the servers’ security have also been suspended.
The e-Hospital data has been restored, according to a statement released by AIIMS administrators. “The servers have been updated with the eHospital data. Before the services may be restarted, the network is being cleaned.

The process is taking some time due to the volume of data and the large number of servers/computers for the hospital services. Measures are being taken for cyber security,” they had said.
“All hospital services, including outpatient, in-patient, laboratories, etc continue to run on manual mode,” the statement had said.

A separate division of the Delhi Police began looking into the attack on the AIIMS Delhi computer system earlier this month.
Official sources claim that a team from the Central Forensic Lab (CFSL) has been sent in to examine the AIIMS Delhi server that has been attacked in order to determine where the malware assault originated.