NHS hospitals targeted in major cyber attack

NHS England says hospitals are now returning to normal following last Friday's (12 May 2017) cyber attack, which saw almost 50 Trusts targeted.

NHS hospitals across England were hit by the attack with hackers demanding a ransom to unencrypt files. 

According to the BBC, Trusts and hospitals in London, Blackburn, Nottingham, Cumbria and Hertfordshire were affected.

Some GP surgeries were told to shut down phone and IT systems while A&Es told people not to attend unless it was a real emergency.

Dr Anne Rainsberry, NHS incident director, said: "Patients are no longer being diverted away from hospital accident and emergency units and, while there is still some disruption in a small number of areas, most patients are being treated as normal.

"We are grateful for the hard work of staff at trusts and GP practices who are still suffering IT issues but have found ways to work around this, as well as the patience of people who have been affected."

On Friday (12 May), NHS Digital said it believed the malware variant was Wanna Decryptor - ransomware which locks users' files and demands a payment to allow access. 

In a statement issued on Saturday (13 May), it said: "We are continuing to work around the clock to support NHS organisations that have reported any issue due to yesterday's cyber-attack. We have received no reports of patient data being compromised.

"We are aware of widespread speculation about the use of Microsoft Windows XP by NHS organisations, who commission IT systems locally depending on population need.

"While the vast majority are running contemporary systems, we can confirm that the number of devices within the NHS that reportedly use XP has fallen to 4.7%, with this figure continuing to decrease.

"This may be because some expensive hardware (such as MRI scanners) cannot be updated immediately, and in such instances organisations will take steps to mitigate any risk, such as by isolating the device from the main network.

"Our focus remains on assisting organisations, working closely with the National Cyber Security Centre, the Department of Health, NHS England and NHS Improvement."

David Evans, director of policy and community at BCS, The Chartered Institute for IT, said: “As news continues to break about this attack, we are reminded that there are some very sick and warped individuals in this world who would seek to put people’s safety and wellbeing at risk in return for money. The fact that some trusts have, as a result of this attack, had to turn patients away and put services on an emergency footing shows the reliance and trust placed on information and technology.

“Unfortunately, any system can be hacked, and that is why Trusts must recognise how important it is that they support IT professionals who can protect and defend against such heinous attacks. The IT profession in health and care also needs to step up and meet that challenge.”

NHS Digital has released guidance for the NHS on protecting against cyber attacks and this can be accessed here

 

Latest Issues

IDSc Annual Conference 2024

Hilton Birmingham Metropole Hotel
26th - 27th November 2024

IV Forum 2024

Birmingham Conference & Events Centre (BCEC)
Wednesday 4th December 2024

The AfPP Roadshow - Leeds

TBA, Leeds
7th December 2024

The Fifth Annual Operating Theatres Show 2025

Kia Oval, London
11th March 2025, 9:00am - 4:00pm

Infection Prevention and Control 2025 Conference and Exhibition

The National Conference Centre, Birmingham
29th – 30th April 2025

Decontamination and Sterilisation 2025 Conference and Exhibition

The National Conference Centre, Birmingham
11th April 2025