Taiwan uncovers identity of Chinese hacker 'Crazyhunter' in Mackay Memorial Hospital cyberattack

TAIPEI (Taiwan News) — Taiwan’s Criminal Investigation Bureau has uncovered the identity of “Crazyhunter,” who attacked Mackay Memorial Hospital and several medical institutions, schools, and companies in February and March.

On Wednesday, the CIB said it confirmed the identity of "Crazyhunter” to be a man surnamed Luo (羅) from Zhejiang Province, China. The CIB’s Technological Crime Investigation Unit analyzed information, including IP addresses, techniques, and malicious coding to discover the hacker’s identity.

On Feb. 6, Taipei’s Mackay Memorial Hospital was attacked by ransomware called “Crazyhunter,” crashing over 500 computers and leaking up to 32.5 GB of patient information. The data stolen reportedly included the medical information of 16.6 million patients from Mackay branches across Taiwan, including Tamsui and Hsinchu.

The hacker left a message calling on Mackay Memorial Hospital to pay a ransom. On Feb. 28, after no payment was sent, the hacker claimed to have sold the patients’ personal information online. The hacker set up a website announcing the victims’ names, which was intended to cause social panic.

The case was transferred to the Taipei District Prosecutors’ Office. It issued a wanted notice for Luo on Tuesday.

The suspect is suspected of breaking laws regarding the obstruction of computer use, personal data protection, and extortion. The action of targeting hospitals, schools, and listed companies endangered the national public security, authorities said.

Luo is also accused of disrupting social order. Authorities noted the suspect set up a website on the dark web to publicize victims and demand ransom, causing psychological panic and instability.

The CIB said it would track down and prosecute cyber criminals to the full extent of the law.