Cyber attacks on hospitals increasing, Red Cross chief warns, amid coronavirus pandemic

IRGC President Peter Maurer said he is increasingly concerned about the destructive effects of cyber operations that cut off electricity supplies and water systems in war-affected countries and halted hospital services in the middle of the coronavirus pandemic.

There was also "an attempted attack against a petrochemical plant and especially alarmingly, cyber-attacks against nuclear facilities".

"If hospitals cannot provide life-saving treatment in the middle of a health crisis or an armed conflict, whole communities will suffer," he told an informal virtual meeting of the UN Security Council.

"If electricity supply is interrupted, there is a real risk that water, health care, and other essential services will be disrupted," the ICRC chief said.

"And if even nuclear facilities are not considered off limits, we risk seeing severe and widespread humanitarian consequences."

Over recent years, Maurer said, cyber attacks against critical infrastructure "have caused significant economic harm, disruption in societies, and tensions" among nations although the ICRC can't confirm any cyber operations that have resulted in human casualties.

He said the frequency of cyber attacks against civilian infrastructure "is increasing and evolving faster than anticipated only a few years ago".

While most appear not to be linked to conflict, he said, "we are concerned that cyber capabilities used in future conflicts will cause graver consequences, in particular for civilians".

Twitter Post

Several countries have stated publicly that they have used cyber operations in military actions, Maurer said.

"As an increasing number of states are developing military cyber capabilities, the ICRC expects that their use is likely to also increase in future conflicts," Maurer added.

He welcomed the Security Council's engagement on the issue of harmful cyber operations, alongside ongoing discussions in the UN General Assembly.

Russia won General Assembly approval in December for a resolution that will start the process of drafting a new international treaty to combat cyber crime over objections from the European Union, the US and others.

They said it would undermine international cooperation to combat cyber crime. Russia has said substantive work on the new convention will begin in 2021.

Maurer said preventive measures are needed.

The ICRC has called on all countries "to reaffirm and clarify the legal framework that protects critical civilian infrastructure against cyber operations", especially particular during conflict including health systems, water and sanitation systems, electricity supply and "installations containing dangerous forces", he said.

But Maurer cautioned that a strong legal framework "is not by itself sufficient to effectively shield civilians and civilian infrastructure from hostile cyber operations".

He said confidence-building measures and a broad range of technical and operational measures are also needed.

"No state can succeed in this alone," Maurer said.

"Instead, broad collaboration among states, as well as between states, the private sector, and academia is essential."

Governments and private hospitals in the Middle East earlier this year were warned of an increased risk of ransomware attacks during the pandemic.

According to a statement issued by global technology company Acronis earlier this year, cybercriminals "will target the government agencies, healthcare facilities and medical professionals treating patients during the COVID-19 crisis".