Cyberattack Hits Shamir Medical Center, Leaks Emails But Spares Core Medical Records

A cyberattack targeting Shamir Medical Center during Yom Kippur has exposed email correspondence some of which included patient information but spared the hospital’s core medical record system, Israeli authorities confirmed Friday.

The Health Ministry and the National Cyber Directorate announced that the attempted breach, which occurred on September 25, was contained before any access to Chameleon, the hospital’s primary patient record platform, was achieved. Officials emphasized that there is no evidence the attackers reached sensitive medical histories or disrupted hospital operations.

While the compromised emails may contain limited personal data, the hospital remains fully functional, and patient care continues uninterrupted, according to hospital staff.

The attack appears to have focused solely on email servers, and its timing during the holiest day on the Jewish calendar raises concerns about targeted attempts to exploit religious holidays for cyber intrusions.

This incident follows a pattern of similar attacks on Israeli medical institutions in recent years. Notable examples include:

• Kfar Shaul Mental Health Center (Jerusalem) – ransomware encrypted systems in September 2023.

• Ziv Medical Center (Safed) – cyberattack in December 2023 forced temporary system shutdown.

• Hillel Yaffe Medical Center (Hadera) – a severe ransomware assault in 2021 crippled systems for weeks.

In response, Israel’s healthcare sector has implemented enhanced cybersecurity protocols, including:

• Segregated critical networks

• Real-time intrusion monitoring

• Isolated backup systems

• Tighter access controls

• Cybersecurity training for clinical staff

The Health Ministry has directed Shamir Medical Center to boost its defenses, restrict access to sensitive data, and remain alert to follow-up threats. Security experts and law enforcement are now working with the hospital to evaluate the breach’s full impact and prevent future incidents.

Officials reaffirm that inter-agency coordination remains essential for protecting Israel’s healthcare infrastructure. As cyber threats grow more sophisticated, safeguarding hospitals from digital attacks is increasingly as vital as securing them from physical ones.

Share this story and subscribe to our newsletter to stay informed about how Israel defends its people in both digital and physical arenas.