After reports that dozens of doctors' offices had been disrupted by a cyberattack, BMS Engineering has now clarified the scale and impact of the incident.
The web applications developed or hosted by BMS Engineering for the digitalisation of the healthcare sector were not directly compromised, according to a press release by BMS. Part of the cloud infrastructure underpinning those services was, however, temporarily unavailable.
The company immediately brought in external cybersecurity experts, notified police and the Luxembourg National Data Protection Commission (CNPD), and gradually returned the infrastructure to service after carrying out security checks.
The investigation did not turn up any evidence of data leaks. BMS also notes that the temporary encryption or unavailability of data should not be equated with a permanent loss of data.
Contrary to reports that at least 80 doctors' offices had been affected, BMS says 40 medical practices were caught up in the incident.
In the meantime, all clients have been able to resume their activities, and essential services have been restored, according to BMS.
Security measures have also been reinforced further. A separate, external backup solution, which had not been affected by the attack, allowed the compromised data to be restored, BMS explained.
Read the full press release below (in French).
