Sat, Aug 16, 2025 page3

• Ministry outlines plans to boost medical cybersafety

  • Staff writer, with CNA
  • • 
    • 
    • 

  The Ministry of Digital Affairs yesterday announced plans to improve cybersecurity resilience in Taiwan’s medical sector, following cyberattacks on at least two hospitals this year that were linked to a Chinese hacker.

  “We are concerned that hospitals could be paralyzed by [ransomware] attacks, posing a major risk to Taiwan, while personal data could also be leaked,” Deputy Minister of Digital Affairs Lin Yi-jing (林宜敬) said.

  The ministry has teamed up with the Ministry of Health and Welfare to improve cybersecurity at hospitals, which are considered critical infrastructure, Lin said.

  

  Lee Chien-chang, head of the Ministry of Heath and Welfare’s Department of Information Management, speaks at a news conference in Taipei yesterday.

  Photo courtesy of the Ministry of Digital Affairs

  Four measures — cyberdefense drills, talent development, institutional guidance and enhanced inspections — would be implemented to help hospitals defend against cyberattacks, Administration for Cyber Security director-general Tsai Fu-longe (蔡福隆) said.

  One of the drills is scheduled for the end of this year, Tsai said.

  Domestic and foreign white-hat hackers — experts who identify vulnerabilities in computer code and alert organizations to them — would be invited to take part in the exercise, which would focus on the medical sector, he said.

  Eleven hospitals would team up in the drills to counter simulated attacks, with the aim to improve their ability to implement protective measures and file reports amid cyberattacks, he added.

  “In the past, hospitals have sometimes handled such defense measures on their own, but the drills will foster closer cooperation between them and help enhance their technical capabilities,” he said.

  Following a series of attacks by hackers named “CrazyHunter” earlier this year, the resilience of Taiwan’s medical sector has improved, said Lee Chien-chang (李建璋), head of health ministry’s Department of Information Management.

  The “CrazyHunter” attack was a ransomware incident that crippled the computer systems of Mackay Memorial Hospital in February and Changhua Christian Hospital in March, both top-tier medical centers in Taiwan’s three-tier hospital classification system.

  While no data were leaked in the Changhua Christian Hospital incident, patient information from the Taipei facility was put up for sale after the hospital refused to pay a ransom, a Criminal Investigation Bureau (CIB) probe showed.

  Following the two cyberattacks, the health ministry in March issued guidelines for hospitals on how to respond to ransomware attacks, Lee said.

  “The response guidelines are almost unheard of in other countries,” he said.

  With the guidelines, cybersecurity staff know what to do after an incident, including what actions to take within 24, 48 and 72 hours — starting with containing the damage, identifying the malware and quickly restoring systems, he said.

  All medical facilities in Taiwan have installed Endpoint Detection and Response, a cybersecurity tool that most did not have before the incidents this year, but Mackay Memorial Hospital did, meaning some of its computers were not compromised, Lee said.

  In April, the CIB said that “CrazyHunter” is the alias of a 20-year-old employee of a cybersecurity company in China’s Zhejiang Province surnamed Lo (羅).

  Asked whether Lo’s cybercrimes were supported by Chinese authorities, Lee said: “We cannot speculate, but it is clear that there was a specific commercial ransom issued.”

  Asked whether Taiwan’s medical sector is prepared to withstand a hacking incident backed by Chinese authorities, Lee said that the government would never assume “that defenses are impenetrable and that incidents will not happen.”

  The focus is on building resilience so that if systems are breached, operations could be restored immediately, he said.

  “This is what we are working on now,” he added.
• Most Popular

  • 1

    Taipei tells Denmark to fix ‘China’ tag

  • 2

    Seven NT$10 million receipt prizes unclaimed

  • 3

    Taiwan aiming to be major UAV player

  • 4

    Taiwanese officials shown 1st F-16V jet due this year

  • 5

    September ‘possible’ for first F-16V delivery: Koo