During a press conference held at the Seimas on Wednesday, M. Jakubauskienė provided an update regarding a security matter involving the State Health Accreditation Service. She confirmed reports concerning a managed cyber incident that took place within an information subsystem managed by the service.
According to initial data presented by the minister, the breach originated from an unauthorized login attempt utilizing a third-party, open-source tool identified as “Apache Superset.” Jakubauskienė emphasized that the scope of the compromised system was limited, specifically noting that the central E.health system, which houses sensitive patient data, remained unaffected by this particular incident. The timeline provided indicated that the activity occurred between June 7th and June 8th, with the breach being detected on the night of June 8th through June 9th. The investigation is ongoing, focusing on the vulnerabilities within the subsystem under the service’s control.
The official statement stressed that while the security breach required immediate attention and investigation, necessary protocols were followed to isolate the affected components. Authorities are currently assessing the full impact of the unauthorized access and implementing enhanced security measures across all related infrastructure to prevent future occurrences. The service continues to monitor the situation closely to ensure the integrity of all health information systems.
Topics: #cyber #incident #under
What specific measures were taken to ensure the cyber incident within the SAM-managed subsystem was fully contained?