PhilHealth hit by Medusa ransomware, DICT restores system

PhilHealth fell victim to a Medusa ransomware attack on Sept. 22, with hackers demanding $300,000 in exchange for decryption keys.

The attackers infiltrated PhilHealth's systems, stole sensitive data, and used the Medusa trojan to encrypt files.

DICT is restoring PhilHealth's DNS server and investigating the incident, while PhilHealth has been operating manually since the attack.

PhilHealth will not pay the ransom and aims to restore its systems by Sept. 27.