The data are secure; the priority was citizens’ health, which is why the system was functional in record time

the cover photograph was taken from MIA

Thank you, first of all, for your attendance at today’s briefing. We discussed in detail the developments related to the cyberattack on the HIF, and precisely for that reason I will be brief in my remarks, because I am confident that you will convey the details to the citizens accurately and clearly.

I would like to begin first with a word of thanks, namely to everyone involved in resolving the challenges arising from the cyberattack, and here I primarily mean the IT team, the engineers, who worked around the clock and with dedication and succeeded in restoring the system’s functions in record time. I say record time because, statistically, many more developed countries have needed an average of around 20 days to restore functionalities. I consider that no small matter, and that is why I mention it.

At the same time, I would also like to thank all employees of the Fund, both at the Headquarters and in the Regional Offices, all partners, health institutions, health workers, pharmacists, other state institutions that cooperated intensively with us, and all others without whom it would not have been possible to implement the transitional solutions by which we ensured the uninterrupted exercise of citizens’ health rights over the past two weeks. I consider this a major success and an excellent positive example of partnership action in the interest of citizens. 

Most importantly of all, thanks to the citizens and to you, the media, for all the patience and understanding you showed in dealing with an attack that affects us all, as well as for the support you gave so that we could address and overcome this challenge, from which I believe we all emerge stronger and more resilient. 

I will begin with the established facts, namely that on 06.02 a technical problem was detected in the Fund, because of which all systems were shut down and a team was called for initial diagnostics. The incident was first reported to the Ministry of Interior, and the public was immediately informed that we had a problem which we were trying to diagnose. As soon as the IT experts determined that it was a cyberattack, the public was informed, and all available IT capacities were engaged in order to restore the system to operation. I must point out that we had enormous support from partner European countries; the experts worked around the clock and we overcame this entire challenge together, as a success story. 

The most important matter that should be mentioned here is that, according to all analyses by IT experts, there has been no leakage of citizens’ data. Citizens should be at ease; the data were not stolen, those are speculations, the data are secure and protected in the Fund. The investigation into all details is currently ongoing, and when it is completed it will be possible to share more information. However, I want to repeat: health and personal data are secure and citizens can continue to exercise all their rights without interruption. Also, the Fund’s systems have been restored almost to normal, and the salaries of health workers have been paid, as have maternity benefits, sick leave payments and various reimbursements. 

I mentioned the transitional solutions. The employees of the Fund worked tirelessly during these two weeks to create the conditions for those transitional solutions until the problem was resolved, all with the aim of ensuring that no citizen was denied the right to health care. This meant that employees, as well as citizens and health workers, had to go through several additional steps, but the swift reaction of all stakeholders enabled citizens to have practically no delay in exercising their rights.

Everyone showed understanding of the seriousness of the problem we faced, and precisely because of that understanding we managed to overcome the problem in two weeks, which, as I mentioned, is an exceptionally short period.

What was a priority for us was that citizens should not suffer harm because of the attack, and I think we succeeded in that. The system has been restored to operation; salaries, sick leave payments, maternity benefits, everything has been paid. At the moment, the Fund is working on entering the outstanding information from these two weeks, after which entry we will probably be able to make a more detailed analysis and assessment.

Briefly, I would like to address two more matters which I believe are of interest to the public.

First, with regard to the Audit Report, about which there was also the most speculation and ambiguity, I want to point out that the Fund has acted on its points and has taken all necessary steps for further protection against such attacks. Responsible work in the interest of citizens is our priority and my priority.

 And second

As a country, we are in no way exceptional in such attacks, which have intensified after the war in Ukraine and through which third parties aim to create chaos in the state system and cause panic and unrest among citizens. Cyberattacks happen and will continue to happen. Hybrid warfare is not new; literally all countries in the world face cyberattacks, and therefore during this period we are committed to strengthening our resilience, working also with other countries and strategic partners.

the video was taken from MIA