Russian hackers first broke into the HSE computer network at least two weeks ago, infecting critical sections of it with ransomware. Before striking in the early hours of Friday morning, the group had spent days inserting malware across the entire network.
The hackers are thought to have initiated a number of easily detectable cyberattacks on Thursday night in order to conceal their earlier presence on the network, before triggering a full-scale ransomware attack at about 4am on Friday.
The full scale of the attack is still emerging. The network is being painstakingly cleaned and restarted, but it is expected to be at least another week before the system is fully operational again. The computer networks of the Department of Health and Tusla, the child and