Taiwan Faces Cyber Threat: Chinese Hacker Targets Hospitals and Businesses

CIB Uncovers Chinese National's Ransomware Scheme Crippling Vital Services and Exposing Sensitive Data.

Taipei, Taiwan – The Criminal Investigation Bureau (CIB) has announced the identification of a 20-year-old Chinese national as the perpetrator behind a series of cyberattacks targeting institutions in Taiwan, including MacKay Memorial Hospital.

The investigation, led by Lin Chien-lung (林建隆), head of the CIB's High-Tech Crime Center, revealed that the hacker, operating under the alias "Crazyhunter," launched a ransomware attack on MacKay Memorial Hospital on February 6th, crippling its computer systems and demanding a ransom. The hospital's refusal to pay led to the stolen patient data being offered for sale on a hacker forum on February 28th.

The CIB's investigation extended beyond the hospital attack, uncovering "Crazyhunter's" involvement in a total of 11 hacking incidents in Taiwan throughout February and March. The attacks targeted additional hospitals, schools, and listed companies, exposing a wider cyber threat landscape.

Through meticulous analysis of IP data, hacking techniques, and the ransomware employed, the CIB identified "Crazyhunter" as Lo (羅), a 20-year-old employee of a cyber security company located in Zhejiang Province, China. Investigators also collected evidence of illicit financial transactions linked to the suspect.

The CIB reported that Lo established a website on the dark web, showcasing his targets and the amounts extorted, with the aim of creating fear and disrupting social order in Taiwan.

As the suspect's alleged actions violated Taiwanese laws, including extortion and offenses against computer security under the Criminal Code, and violations of the Personal Data Protection Act, the case was referred to Taipei prosecutors. The prosecutors will seek an arrest warrant.

The CIB indicated that prosecutors will utilize cross-strait channels to transmit evidence of Lo's criminal activities to China's Ministry of Public Security.