
Major Cyberattack – Rapid Response by MSWiA Hospital and T-Mobile Experts
On Saturday, 8 March 2025, the MSWiA hospital in Kraków became the target of a serious ransomware attack that paralysed the facility’s ICT infrastructure. T Business experts immediately engaged in supporting the hospital in restoring systems and securing data.
- Client: the MSWiA hospital in Kraków
- Industry: Healthcare


Our Partner
The MSWiA hospital in Kraków is a modern multi-specialty medical facility providing comprehensive healthcare services.
The hospital is known for its high-quality care, professional staff and wide range of departments, from surgery, neurology and orthopaedics to gynaecology and intensive care. Every year, thousands of patients use its services, both for planned treatment and in emergencies.


Objectives and Challenges
In March 2025, the hospital fell victim to a ransomware cyberattack, which completely paralysed its IT systems and resulted in the encryption of its data. The hospital was unable to respond to such a serious incident on its own, so the hospital management decided to seek assistance from representatives of T-Mobile Business Solutions. In this situation, the hospital needed a trusted technology partner who could provide support in restoring the systems to working order and ensure the security of the infrastructure for the future.

Joint Action
Although T-Mobile Business Solutions had been providing the hospital with network solutions as a trusted technology partner for years, it had not previously worked with the hospital on cybersecurity solutions. However, thanks to the trust built up and the effective cooperation to date, the company became the natural choice in a crisis situation.
Upon receiving the report, a project team was immediately set up to secure the server data and take supportive measures in accordance with the guidelines of the relevant authorities.


Implementation
Key actions included data recovery from backups and infrastructure rebuilding. Immediately after receiving news of the cyberattack from the hospital, a team of engineers from T-Mobile Business Solutions delivered replacement equipment, network devices and temporary internet access to enable the engineers working remotely to carry out their analysis as quickly as possible. The team helped rebuild the infrastructure and restore data, and also implemented measures to improve the security of the environment being restored following the attack, including a user and device management system and a system that analyses and combines data from various sources to detect threats more quickly.












