--- title: Ransomware Strikes German Hospitals description: "Explore the recent Lockbit ransomware attack on German hospitals, uncovering the impact on healthcare services and ongoing investigations. Understand the importance of cybersecurity in safeguarding critical infrastructure. #RansomwareAttack #GermanHospitals #Lockbit #Cybersecurity #HealthcareSecurity #DataProtection #StaySecure" image: https://www.omniit.de/hubfs/junger-maennlicher-forscher-der-wissenschaftliches-experiment-durchfuehrt.jpg --- ![](https://www.omniit.de/hubfs/raw_assets/public/OmniIT25_Relaunch/images/sections/muster-rechts-oben-bunt.svg) ![](https://www.omniit.de/hs-fs/hubfs/junger-maennlicher-forscher-der-wissenschaftliches-experiment-durchfuehrt.jpg?width=1500&height=1000&name=junger-maennlicher-forscher-der-wissenschaftliches-experiment-durchfuehrt.jpg) In a recent incident, the Katholische Hospitalvereinigung Ostwestfalen (KHO) network, a German hospital group, has confirmed that three of its hospitals faced severe service disruptions due to a Lockbit ransomware attack. The attack unfolded in the early morning of December 24, 2023, impacting the operational systems of three hospitals located in Bielefeld, Rheda-Wiedenbrück, and Herford, Germany. According to a translated statement from the hospital, "Unknown actors gained access to the IT infrastructure systems of the hospitals and encrypted data. A preliminary assessment indicates a likely cyberattack by Lockbit 3.0, with an unpredictable resolution time."As a precautionary measure, all systems were immediately shut down upon discovery, and relevant parties and institutions were promptly notified. Investigations are currently underway to determine the extent of the damage and whether any data was stolen during the cyberattack.The three affected hospitals, operated by KHO, include: 1. Franziskus Hospital Bielefeld – 614 beds, ten specialist departments, 390 doctors and staff 2. Sankt Vinzenz Hospital Rheda-Wiedenbrück – 614 beds, five specialist departments, 200 doctors and staff 3. Mathilden Hospital Herford – 614 beds, eight specialist departments, 230 doctors and staff These hospitals play a crucial role in providing healthcare services in their respective areas. A cyberattack on their IT systems raises concerns about potential repercussions for individuals in medical emergencies. KHO's announcement assures that patient treatment continues as usual in the affected hospitals, with clinic operations available, albeit with some technical limitations. Essential patient information remains accessible due to the successful restoration of backups.However, emergency care services are currently unavailable in the three KHO hospitals. Individuals requiring urgent medical attention are being redirected elsewhere, potentially leading to critical delays. As of the latest update, the Lockbit ransomware gang has not added KHO to its extortion portal on the dark web. The determination of whether the cybercriminals stole patient data or other sensitive information remains pending. Ongoing investigations aim to shed light on the full scope of the incident. Stay ahead of the wave ## Category: - [StaySecure](https://www.omniit.de/en/blog/tag/staysecure#posts) - [Cybersecurity](https://www.omniit.de/en/blog/tag/cybersecurity#posts) - [DataProtection](https://www.omniit.de/en/blog/tag/dataprotection#posts) - [HealthcareSecurity](https://www.omniit.de/en/blog/tag/healthcaresecurity#posts) - [RansomwareAttack](https://www.omniit.de/en/blog/tag/ransomwareattack#posts) - [Lockbit](https://www.omniit.de/en/blog/tag/lockbit#posts) - [GermanHospitals](https://www.omniit.de/en/blog/tag/germanhospitals#posts) ## Similar/Related Articles ![When Attackers Don’t Break the Rules—They Abuse Them: Understanding Business Logic Abuse](https://www.omniit.de/hs-fs/hubfs/2149361882.jpg?width=700&height=480&name=2149361882.jpg) 15 Sep 2025 ### When Attackers Don’t Break the Rules—They Abuse Them: Understanding Business Logic Abuse Not every cyberattack involves malware or exploits. Sometimes, attackers don’t break the rules—they simply abuse them. That’s the essence of Business ... Read more [Read more: When Attackers Don’t Break the Rules—They Abuse Them: Understanding Business Logic Abuse ](https://www.omniit.de/en/blog/when-attackers-dont-break-the-rules-they-abuse-them-understanding-business-logic-abuse?hsLang=en) ![Data Poisoning: The Silent Threat Undermining AI from Within](https://www.omniit.de/hs-fs/hubfs/2152004086.jpg?width=700&height=480&name=2152004086.jpg) 08 Sep 2025 ### Data Poisoning: The Silent Threat Undermining AI from Within Machine learning models are only as good as the data they’re trained on. But what if that data has been intentionally tampered with? Welcome to Data ... Read more [Read more: Data Poisoning: The Silent Threat Undermining AI from Within ](https://www.omniit.de/en/blog/data-poisoning-the-silent-threat-undermining-ai-from-within?hsLang=en) ![Container Security: Lightweight Doesn’t Mean Bulletproof](https://www.omniit.de/hs-fs/hubfs/18697.jpg?width=700&height=480&name=18697.jpg) 01 Sep 2025 ### Container Security: Lightweight Doesn’t Mean Bulletproof Containers have transformed how we build and ship software. They’re fast, portable, and scalable. But they also come with security assumptions that often ... Read more [Read more: Container Security: Lightweight Doesn’t Mean Bulletproof ](https://www.omniit.de/en/blog/container-security-lightweight-doesnt-mean-bulletproof?hsLang=en) OmniIT News ## Für Entscheider mit wenig Zeit Kompakte IT-Insights, Best Practices und strategisches Know-how zu den Themen Cyber Resilience, Cloud- Architektur, AI-Transformation und Staff Augmentation – bequem per Mail. This form requires JavaScript. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Ronny Schubhart", "url" : "https://www.omniit.de/en/blog/author/ronny-schubhart" }, "dateModified" : "2024-01-29T10:00:00.758Z", "datePublished" : "2024-01-29T10:00:00.000Z", "headline" : "Ransomware Strikes German Hospitals", "image" : [ "https://www.omniit.de/hubfs/junger-maennlicher-forscher-der-wissenschaftliches-experiment-durchfuehrt.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.omniit.de/en/blog/ransomware-strikes-german-hospitals", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.omniit.de/hubfs/omniIT%20Logo%20Complete%20Carbon%20SVG-1.svg" }, "name" : "omniIT GmbH" } } ```