{"url":"https://newsforagent.com/news/2026-10-27/kamalnayan-bajaj-hospital-ransomware-attack","markdown_url":"https://newsforagent.com/news/2026-10-27/kamalnayan-bajaj-hospital-ransomware-attack.md","title":"Kamalnayan Bajaj Hospital Hit by Ransomware on Nine Servers","headline":"Kamalnayan Bajaj Hospital Ransomware Attack Encrypts Nine Servers and Halts Billing","description":"A ransomware attack encrypted all nine servers at Kamalnayan Bajaj Hospital, disrupting billing and insurance claims since October 18 and prompting a police FIR.","section":"Incidents","published_at":"2026-10-27T18:21:58+00:00","modified_at":"2026-10-27T18:21:58+00:00","author":"News Desk","key_takeaways":["Kamalnayan Bajaj Hospital reported that all nine of its servers were hacked, data was encrypted and a ransom was demanded.","Billing staff found the Hospital Management Information System unusable around 3 am on October 18.","Satara area police registered an FIR under section 308 of the Bharatiya Nyaya Sanhita and the Information Technology Act, with Inspector Krushnachandra Shinde investigating.","Dr Milind Vaishnav said the hospital's disaster management plan has been executed and services have slowed rather than stopped."],"companies":[{"name":"Kamalnayan Bajaj Hospital","is_primary":true,"profile_url":"https://akta.pro/company-profiles/002fwx5/kamalnayan-bajaj-hospital","website":"https://www.bajajhospital.com"}],"source":{"publisher":"The Times of India","title":"Cyber attack cripples services at Kamalnayan Bajaj Hospital; billing, insurance claims hit","url":"https://timesofindia.indiatimes.com/city/aurangabad/cyber-attack-cripples-services-at-kamalnayan-bajaj-hospital-billing-insurance-claims-hit/articleshow/135243178.cms"},"other_sources":[{"publisher":"Yahoo","url":"https://www.yahoo.com/news/articles/unm-health-impacted-cyberattack-185902116.html"},{"publisher":"GlobeNewswire","url":"https://www.globenewswire.com/news-release/2026/10/16/3382778/0/en/medical-data-rx-data-breach-investigation-edelson-lechtzin-llp-probes-class-action-claims-after-customer-data-is-exposed.html"},{"publisher":"Yahoo","url":"https://www.yahoo.com/news/us/articles/1-4-million-impacted-central-154037942.html"}],"tags":["Incidents","Kamalnayan Bajaj Hospital"],"body_markdown":"A ransomware attack on the servers of Kamalnayan Bajaj Hospital has disrupted billing, health insurance processing and treatment benefits under government schemes since October 18, with police registering an FIR against unidentified cyber criminals after the hospital said all nine of its servers were hacked, data was encrypted and a ransom was demanded. The Times of India [reported](https://timesofindia.indiatimes.com/city/aurangabad/cyber-attack-cripples-services-at-kamalnayan-bajaj-hospital-billing-insurance-claims-hit/articleshow/135243178.cms) the case on October 27.\n\n## How the Kamalnayan Bajaj Hospital Attack Unfolded\n\n[Kamalnayan Bajaj Hospital](https://akta.pro/company-profiles/002fwx5/kamalnayan-bajaj-hospital) is a NABH/NABL-accredited tertiary multi-specialty hospital in Chhatrapati Sambhajinagar, Maharashtra, operating 200 beds, 65 critical care beds and 6 operation theaters for patients across the Marathwada region.\n\nAccording to the complaint, the breach came to light around 3 am on October 18 when billing staff found that bills could not be generated because the Hospital Management Information System had stopped functioning. Prashant Pandey, the hospital's IT department head, was alerted and found the server inaccessible, displaying an \"access denied\" message. The firewall could not be accessed, and antivirus logs reportedly indicated a virus attack across all nine servers. Pandey declined to comment on the investigation.\n\nPolice said a ransom note later appeared on the system. The note, purportedly from a group calling itself \"Crypto24 Group\", claimed hospital files had been encrypted and sensitive data stolen, and warned that the data would be published on a Tor-based leak site unless contact was established within a stipulated period. The FIR states that patient care, billing, insurance processing, reporting and several other hospital functions were affected.\n\n\"The services have not stopped, they have just slowed down,\" said hospital executive committee member Dr Milind Vaishnav. \"We have informed all the authorities concerned, including those heading govt schemes, about the situation. We have a disaster management plan in place and it has been executed,\" Vaishnav added.\n\nBased on Pandey's complaint, Satara area police registered a case under section 308 of the Bharatiya Nyaya Sanhita and relevant provisions of the Information Technology Act. Inspector Krushnachandra Shinde is investigating the case. Shinde said the hospital first reported the incident to CERT-In, the national cyber security agency, and provided the required technical information before approaching the police. Police said the complaint does not disclose the amount of ransom allegedly demanded.\n\n## Kamalnayan Bajaj Hospital's Digital Plans\n\nAccording to akta.pro [company records](https://akta.pro/company-data), the hospital signed a tripartite memorandum of understanding in February 2026 with Findability Sciences Private Limited and Nath School of Business & Technology to research, develop, test and deploy AI-driven healthcare solutions across India. The records state that Findability Sciences leads AI architecture and model development while the hospital provides clinical expertise and anonymized healthcare data.\n\n## Other Healthcare Cyberattacks\n\nUNM Health was experiencing a cyberattack on October 26 that diverted ambulance traffic to other hospitals and cancelled all clinic appointments, [Yahoo reported](https://www.yahoo.com/news/articles/unm-health-impacted-cyberattack-185902116.html). Central Ohio Primary Care Physicians was breached in August by the Chaos ransomware group, affecting 1.4 million people, [Yahoo reported](https://www.yahoo.com/news/us/articles/1-4-million-impacted-central-154037942.html). Edelson Lechtzin LLP said it is investigating data privacy claims after a reported ransomware attack on Medical Data Rx, [GlobeNewswire reported](https://www.globenewswire.com/news-release/2026/10/16/3382778/0/en/medical-data-rx-data-breach-investigation-edelson-lechtzin-llp-probes-class-action-claims-after-customer-data-is-exposed.html).\n\n## What Comes Next for the Investigation\n\nInspector Krushnachandra Shinde is investigating the case registered at Satara area police station. The hospital reported the incident to CERT-In before approaching the police, according to Shinde.\n","publisher":{"name":"News for Agent","url":"https://newsforagent.com"}}