More than 100,000 NHS patients in the Dumfries and Galloway region of southern Scotland have been warned to assume some of their patient data may have been published online after a major hack.
The health board, which has described the situation as “extremely serious”, was targeted by a ransomware group in February, reports the BBC. When its demands were not met, it published stolen files online.
Patients classed as “high risk” will be contacted by the health board, which has asked everyone to remain on their guard for any attempts to access their computer systems.
It confirmed in May that the cyber-criminals had published some children’s mental health data.
More than 100 000 people live in Dumfries and Galloway, and the board previously said that “hundreds if not thousands” of patients and staff may have been affected, but it is now feared that figure is far higher.
Published information includes X-rays, test results and letters between healthcare professionals.
NHS Dumfries and Galloway says its biggest concern is for vulnerable groups of people because if criminals have access to their information it may put them at higher risk.
South Scotland MP Colin Smyth said it remained unclear “exactly what has been leaked on patients”, despite significant work by the NHS “to work through millions of items”, and thus far, the data did not appear to have been used against anyone.
BBC article – NHS hack warning issued to everyone in Dumfries and Galloway (Open access)
See more from MedicalBrief archives:
Cover-up claims over NHS data breach affecting thousands
Cyber-attack disrupts London hospitals
Cyber thieves post patients’ data stolen from Australian medical insurer