LockBit provided a decoder for free and apologized to the hospital for sick children in Toronto, the largest pediatric medical center of Canada. The group said that one of her partners violated the rules by attacking a medical organization. Cyberataka occurred on December 18 and violated the work of several internal hospital and corporate systems, some telephone lines and web pages of the hospital, but could not stop the reception of patients.
December 29, representatives of the hacked pediatric medical center announced that their IT specialists were able to restore 50% of the most important systems, including those used in the diagnosis and treatment of diseases. Two days after this statement, the attackers apologized and provided a free decoder. According to them, the hospital was attacked by one of their partners, who has already been blocked and suspended from work with Lockbit.
However, this does not explain why the hackers did not provide the decoder before, because the hospital was badly damaged by the attack, and its IT specialists were forced to work on the restoration of systems from December 18.