2020 Düsseldorf University Hospital — ransomware, patient death
Data compromised
Hospital IT systems
Technical writeup
DoppelPaymer ransomware via Citrix VPN. 30 servers encrypted. Patient transferred to Wuppertal, died. Homicide probe closed (causal link not established). Hackers provided decryption key after learning they hit hospital.
Root cause
Ransomware; Citrix VPN vulnerability