{"id":65112,"date":"2026-09-21T09:48:34","date_gmt":"2026-09-21T07:48:34","guid":{"rendered":"https:\/\/www.invarena.cz\/?p=65112"},"modified":"2026-09-21T09:48:35","modified_gmt":"2026-09-21T07:48:35","slug":"ransomware-uderil-na-zdravotnictvi-vyrobu-i-it-sluzby-unikla-citliva-data-pacientu","status":"publish","type":"post","link":"https:\/\/www.invarena.cz\/?p=65112","title":{"rendered":"Ransomware ude\u0159il na zdravotnictv\u00ed, v\u00fdrobu i IT slu\u017eby. Unikla citliv\u00e1 data pacient\u016f"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><br \/>Srpen 2026 p\u0159inesl v \u010cesk\u00e9 republice intenzivn\u00ed ransomwarovou aktivitu s celkem sedmn\u00e1cti zdokumentovan\u00fdmi hrozbami nap\u0159\u00ed\u010d kl\u00ed\u010dov\u00fdmi odv\u011btv\u00edmi ekonomiky \u2013 zdravotnictv\u00edm, v\u00fdrobou, informa\u010dn\u00edmi technologiemi, st\u00e1tn\u00ed spr\u00e1vou a \u0161kolstv\u00edm, internetov\u00fdmi slu\u017ebami a obchodem. Nejz\u00e1va\u017en\u011bj\u0161\u00edm incidentem m\u011bs\u00edce byl \u00fatok na \u010desk\u00fd zdravotnick\u00fd subjekt, po kter\u00e9m \u00fato\u010dn\u00edci nab\u00edzeli k prodeji rozs\u00e1hlou datab\u00e1zi pacientsk\u00fdch a person\u00e1ln\u00edch dat. Vypl\u00fdv\u00e1 to z anal\u00fdzy zpracovan\u00e9 \u010deskou spole\u010dnost\u00ed ComSource, kter\u00e1 se zam\u011b\u0159uje na kyberbezpe\u010dnost, s\u00ed\u0165ovou infrastrukturu a datovou analytiku.<br \/><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201eZdravotnictv\u00ed se v srpnu stalo ter\u010dem \u00fatoku, kter\u00fd svou povahou pat\u0159\u00ed k nejz\u00e1va\u017en\u011bj\u0161\u00edm za posledn\u00ed m\u011bs\u00edce. \u00dato\u010dn\u00edci nab\u00edzeli k prodeji datab\u00e1zi obsahuj\u00edc\u00ed kontakty pacient\u016f v\u010detn\u011b zdravotn\u00edch z\u00e1znam\u016f, informace o rezervac\u00edch n\u00e1v\u0161t\u011bv s platebn\u00edmi a poji\u0161\u0165ovac\u00edmi \u00fadaji a tak\u00e9 profily zdravotnick\u00e9ho person\u00e1lu. Ze z\u00e1sady neuv\u00e1d\u00edme, o kter\u00fd konkr\u00e9tn\u00ed subjekt \u0161lo, ale tento \u00fatok p\u0159edstavuje opravdu z\u00e1va\u017enou hrozbu kv\u016fli citliv\u00e9 povaze zdravotn\u00edch dat a potenci\u00e1ln\u00edmu naru\u0161en\u00ed p\u00e9\u010de o pacienty,\u201c \u0159\u00edk\u00e1 Michal \u0160tus\u00e1k, expert na kybernetickou bezpe\u010dnost a spolumajitel spole\u010dnosti ComSource.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br \/>\u00danik byl zaznamen\u00e1n 27. srpna, \u00fato\u010dn\u00edci ze skupiny DataBastard pak data nab\u00edzeli k prodeji za 1 400 dolar\u016f. \u201eZdravotnick\u00e1 data maj\u00ed svou specifickou hodnotu, proto\u017ee je nelze jednodu\u0161e zneplatnit jako heslo \u2013 jednou unikl\u00fd zdravotn\u00ed z\u00e1znam z\u016fst\u00e1v\u00e1 citliv\u00fd natrvalo. Firmy a instituce spravuj\u00edc\u00ed takov\u00e1 data by m\u011bly investovat do ochrany \u00fam\u011brn\u011b tomu, co je v s\u00e1zce,\u201c dod\u00e1v\u00e1 Michal \u0160tus\u00e1k z ComSource.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br \/>V\u00fdroba a IT slu\u017eby za\u017eily nejvy\u0161\u0161\u00ed po\u010det incident\u016f<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nejkoncentrovan\u011bj\u0161\u00ed \u00fato\u010dnou vlnu zaznamenal sektor informa\u010dn\u00edch technologi\u00ed a profesion\u00e1ln\u00edch slu\u017eeb, kde skupina Titan v polovin\u011b srpna systematicky zas\u00e1hla n\u011bkolik firem spravuj\u00edc\u00edch data a poskytuj\u00edc\u00edch IT poradenstv\u00ed, a stala se s celkem \u010dty\u0159mi \u00fatoky za m\u011bs\u00edc nejaktivn\u011bj\u0161\u00ed ransomwarovou skupinou. Skupina Lockbit za\u00fato\u010dila na dal\u0161\u00edho poskytovatele IT slu\u017eeb, zat\u00edmco v\u00fdrobn\u00ed a pr\u016fmyslov\u00fd sektor \u010delil z\u00e1sah\u016fm skupin Krybit a Aur0ra.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br \/>\u201eOpakovan\u00e9 c\u00edlen\u00ed na firmy, kter\u00e9 pro jin\u00e9 organizace spravuj\u00ed data nebo IT infrastrukturu, je jeden z nejnebezpe\u010dn\u011bj\u0161\u00edch trend\u016f, kter\u00e9 v posledn\u00edch m\u011bs\u00edc\u00edch vid\u00edme. Jeden \u00fasp\u011b\u0161n\u00fd pr\u016fnik do takov\u00e9 spole\u010dnosti m\u016f\u017ee otev\u0159\u00edt cestu k des\u00edtk\u00e1m dal\u0161\u00edch klient\u016f nap\u0159\u00ed\u010d trhem,\u201c upozor\u0148uje Michal \u0160tus\u00e1k z ComSource.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Skupina Space Bears za\u00fato\u010dila na poskytovatele internetov\u00fdch slu\u017eeb, p\u0159i\u010dem\u017e po prvn\u00edm ozn\u00e1men\u00ed 22. srpna n\u00e1sledoval o \u0161est dn\u00ed pozd\u011bji \u00fanik dat, co\u017e ohro\u017euje nejen provoz platformy, ale i data jej\u00edch klient\u016f. St\u00e1tn\u00ed spr\u00e1va a \u0161kolstv\u00ed \u010delily \u00fatok\u016fm skupiny Krybit na obecn\u00ed web a skupiny The Gentlemen na z\u00e1kladn\u00ed \u0161kolu, zat\u00edmco v obchodn\u00edm segmentu se objevila tvrzen\u00ed o \u00faniku 105 000 z\u00e1znam\u016f z e-shopu a dal\u0161\u00edch datab\u00e1z\u00ed nab\u00edzen\u00fdch akt\u00e9ry Linda2000 a exfilar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br \/>\u201eKombinace ransomwaru a aktivn\u00edho obchodu s unikl\u00fdmi datab\u00e1zemi na f\u00f3rech ukazuje, \u017ee \u00fato\u010dn\u00edci c\u00edl\u00ed prakticky na celou \u010deskou ekonomickou infrastrukturu \u2013 od \u00fa\u0159ad\u016f p\u0159es \u0161koly a\u017e po e-commerce. V\u0161echny srpnov\u00e9 incidenty jsme klasifikovali se st\u0159edn\u00ed z\u00e1va\u017enost\u00ed, ale objem a rozmanitost c\u00edl\u016f je varovn\u00fdm sign\u00e1lem,\u201c uzav\u00edr\u00e1 Michal \u0160tus\u00e1k z ComSource.<br \/>Za sledovan\u00e9 obdob\u00ed bylo d\u00e1le zaznamen\u00e1no 120 nov\u00fdch \u00fanik\u016f p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f z botnet\u016f a phishingov\u00fdch zdroj\u016f a p\u0159es 47 000 phishingov\u00fdch ud\u00e1lost\u00ed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br \/>Anal\u00fdza \u010desk\u00e9ho kybernetick\u00e9ho prost\u0159ed\u00ed byla p\u0159ipravena ve spolupr\u00e1ci s Group-IB, jej\u00edm\u017e kl\u00ed\u010dov\u00fdm partnerem v \u010cesk\u00e9 republice je pr\u00e1v\u011b spole\u010dnost ComSource. Group-IB je p\u0159edn\u00ed glob\u00e1ln\u00ed poskytovatel \u0159e\u0161en\u00ed pro kybernetickou bezpe\u010dnost, specializuj\u00edc\u00ed se na prevenci kybernetick\u00fdch \u00fatok\u016f, vy\u0161et\u0159ov\u00e1n\u00ed podvod\u016f a ochranu digit\u00e1ln\u00edch aktiv. Spole\u010dnost p\u016fsob\u00ed v des\u00edtk\u00e1ch zem\u00ed a je zn\u00e1m\u00e1 sv\u00fdm v\u00fdzkumem v oblasti threat intelligence, phishingu a organizovan\u00e9ho kyberzlo\u010dinu. Gartner za\u0159adil Group-IB mezi l\u00eddry v hodnocen\u00ed Magic Quadrant pro technologie pro sb\u011br informac\u00ed o kybernetick\u00fdch hrozb\u00e1ch.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br \/>O spole\u010dnosti ComSource<br \/>Spole\u010dnost ComSource se v oblasti kybernetick\u00e9 bezpe\u010dnosti a s\u00ed\u0165ov\u00e9 infrastruktury pohybuje od roku 2010, od roku 2023 se soust\u0159ed\u00ed i na oblast datov\u00e9 analytiky. Poskytuje vysoce profesion\u00e1ln\u00ed slu\u017eby a dod\u00e1v\u00e1 ta nejlep\u0161\u00ed infrastrukturn\u00ed a bezpe\u010dnostn\u00ed \u0159e\u0161en\u00ed on-premise, v cloudu nebo v hybridn\u00edch prost\u0159ed\u00edch. D\u00edky vlastn\u00ed laborato\u0159i ComSource vyvinul a d\u00e1le rozv\u00edj\u00ed i vlastn\u00ed \u0159e\u0161en\u00ed a slu\u017eby. Nejv\u00fdrazn\u011bj\u0161\u00ed z nich je syst\u00e9m FlowGuard chr\u00e1n\u00edc\u00ed p\u0159ed DDoS \u00fatoky. ComSource m\u00e1 CSIRT t\u00fdm, je aktivn\u00edm \u010dlenem AFCEA a projektu FENIX. Spole\u010dnost m\u00e1 sv\u00e9 pobo\u010dky v Praze, Brn\u011b, P\u00edsku a v Bratislav\u011b.<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<div class=\"mh-excerpt\"><p>Srpen 2026 p\u0159inesl v \u010cesk\u00e9 republice intenzivn\u00ed ransomwarovou aktivitu s celkem sedmn\u00e1cti zdokumentovan\u00fdmi hrozbami nap\u0159\u00ed\u010d kl\u00ed\u010dov\u00fdmi odv\u011btv\u00edmi ekonomiky \u2013 zdravotnictv\u00edm, v\u00fdrobou, informa\u010dn\u00edmi technologiemi, st\u00e1tn\u00ed spr\u00e1vou <a class=\"mh-excerpt-more\" href=\"https:\/\/www.invarena.cz\/?p=65112\" title=\"Ransomware ude\u0159il na zdravotnictv\u00ed, v\u00fdrobu i IT slu\u017eby. Unikla citliv\u00e1 data pacient\u016f\">[&#8230;]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":17230,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-65112","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zpravy"],"_links":{"self":[{"href":"https:\/\/www.invarena.cz\/index.php?rest_route=\/wp\/v2\/posts\/65112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.invarena.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.invarena.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.invarena.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.invarena.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=65112"}],"version-history":[{"count":0,"href":"https:\/\/www.invarena.cz\/index.php?rest_route=\/wp\/v2\/posts\/65112\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.invarena.cz\/index.php?rest_route=\/wp\/v2\/media\/17230"}],"wp:attachment":[{"href":"https:\/\/www.invarena.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=65112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.invarena.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=65112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.invarena.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=65112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}