AIIMS cyber attack has origin in China, say investigators

Forensic analysis on the hacked AIIMS servers led investigators to a trail of IP addresses and email accounts that end in China and China-controlled Hong Kong, people aware of the matter told HT, offering the clearest signs yet of where the attack could have originated.

At least four IP addresses were traced, and previously unknown email addresses and phone numbers were found, which too linked back to entities or locations based in Chinese territories. The identity or affiliation of attackers, as is invariably the case with such cyberattacks, could not be determined, the people said.