Back to the archive
Incident file · 2021
Waikato District Health Board
Public health · New Zealand · Threat actor: Conti-linked affiliate
Ransomware
Ransom refused
- Undisclosed
- Ransom demanded
- No
- Ransom paid
- 21 days
- Estimated downtime
- US$20m
- Est. revenue lost
What happened
Ransomware disabled clinical systems across five hospitals, forcing paper-based care and deferred surgeries.
How it ended
Government policy prohibited payment; recovery took three weeks of manual workarounds.
Data affected
Patient records
Would your business survive this incident?
We stress-test detection, response and recovery so a ransom demand is never your only option.