{
	"id": "d79a613a-503e-4e7f-aaac-a62969e1f9bb",
	"created_at": "2026-04-06T00:17:25.921253Z",
	"updated_at": "2026-04-10T13:12:12.459847Z",
	"deleted_at": null,
	"sha1_hash": "b32c14c14315eb29dfb66620503f77e1b872eccb",
	"title": "First death reported following a ransomware attack on a German hospital",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 1301968,
	"plain_text": "First death reported following a ransomware attack on a German\r\nhospital\r\nBy Written by Catalin Cimpanu, ContributorContributor Sept. 17, 2020 at 9:24 a.m. PT\r\nArchived: 2026-04-05 14:00:02 UTC\r\nImage: Camilo Jimenez\r\nExecutive guide\r\nGerman authorities are investigating the death of a patient following a ransomware attack on a hospital in\r\nDuesseldorf.\r\nThe patient, identified only as a woman who needed urgent medical care, died after being re-routed to a hospital in\r\nthe city of Wuppertal, more than 30 km away from her initial intended destination, the Duesseldorf University\r\nHospital.\r\nThe Duesseldorf hospital was unable to receive her as it was in the midst of dealing with a ransomware attack that\r\nhit its network and infected more than 30 internal servers on September 10, last week.\r\nThe incident marks the first-ever reported human death indirectly caused by a ransomware attack.\r\nThe patient's death is currently being investigated by German authorities. If the ransomware attack and the\r\nhospital downtime are found to have been directly at fault for the woman's death, German police said it plans to\r\nturn their investigation into a murder case.\r\nAccording to German news outlet RTL, the ransomware gang has withdrawn its ransom demand after German\r\npolice reached out. The hospital has since received a decryption and is restoring its systems.\r\nhttps://www.zdnet.com/article/first-death-reported-following-a-ransomware-attack-on-a-german-hospital/\r\nPage 1 of 2\n\nIn a tweet earlier today, hospital officials blamed the ransomware infection on a vulnerability in a widely used\r\ncommercial software.\r\nIn a subsequent tweet, the same officials said they notified German authorities, such as the German cybersecurity\r\nagency BSI, who are responsible for issuing appropriate security warnings.\r\nA day earlier, the BSI had issued a warning, out of the blue, asking German companies to update their Citrix\r\nnetwork gateways for the CVE-2019-19871 vulnerability, a known entry point for ransomware gangs.\r\nThe Associated Press also reported today that the entire ransomware attack on the hospital's network appears to\r\nhave been an accident, with the ransom note being addressed to the local university (Duesseldorf Heinrich Heine\r\nUniversity), and not the hospital, which was only part of the larger network.\r\nSecurity\r\nEditorial standards\r\nSource: https://www.zdnet.com/article/first-death-reported-following-a-ransomware-attack-on-a-german-hospital/\r\nhttps://www.zdnet.com/article/first-death-reported-following-a-ransomware-attack-on-a-german-hospital/\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://www.zdnet.com/article/first-death-reported-following-a-ransomware-attack-on-a-german-hospital/"
	],
	"report_names": [
		"first-death-reported-following-a-ransomware-attack-on-a-german-hospital"
	],
	"threat_actors": [],
	"ts_created_at": 1775434645,
	"ts_updated_at": 1775826732,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/b32c14c14315eb29dfb66620503f77e1b872eccb.pdf",
		"text": "https://archive.orkl.eu/b32c14c14315eb29dfb66620503f77e1b872eccb.txt",
		"img": "https://archive.orkl.eu/b32c14c14315eb29dfb66620503f77e1b872eccb.jpg"
	}
}