NHS Board Releases Massive Amount of Medical Data on Dark Web
NHS Dumfries and Galloway fell victim to a cyberattack in March, resulting in the release of a portion of patients’ information.
A significant amount of data, including patient information, has been disclosed on the dark web by cyber criminals, as confirmed by an NHS board.
On March 15, NHS Dumfries and Galloway reported a targeted and ongoing cyberattack, leading to the exposure of data concerning a small group of patients.
The confidential information was reportedly made public by a group known as INC Ransom, an operation specializing in ransomware extortion that emerged in July 2023 and has focused on various sectors such as healthcare, education, and governmental institutions.
A fresh batch of data was unveiled on the dark web recently, with the board stating that it is not easily accessible to the general public.
Julie White, the Chief Executive of NHS Dumfries and Galloway, expressed strong condemnation for the criminal act perpetrated by cyber criminals who had threatened to release more data. She emphasized that such actions reflect the typical operations of these criminal groups.
Related Stories
The board is collaborating with partner agencies to evaluate the released data, as confirmed by Ms. White.
“This is an ongoing criminal matter, and we are working closely with national bodies such as Police Scotland, the National Cyber Security Centre, and the Scottish Government,” she stated.
Helpline
A dedicated helpline has been established to provide information to patients and staff who may have been impacted by the breach. The helpline is accessible to the public, while the board is consistently updating its website with the latest developments regarding the cyberattack.
NHS Dumfries and Galloway continues to adhere to the directives provided by national law enforcement agencies, advising all involved parties to remain vigilant against any attempts to access their personal or work-related data.
Patients, staff, and the general public are cautioned about potential approaches from cyber criminals through email, phone calls, or social media, claiming possession of personal or NHS-related information, as highlighted by the board.
The initial data release, following the hacking incident in March, allegedly contained biochemistry and genetics reports, alongside doctor-patient correspondence regarding treatments and psychological evaluations.
Jeff Ace, the former NHS Dumfries and Galloway chief executive, expressed strong disapproval of the exposure of confidential patient data.
Breach Impact
In a communication to The Epoch Times in March, a representative of Police Scotland disclosed that investigations into the cyberattack on the hospital were ongoing. The Scottish Government indicated that no other medical facility seemed to have been affected.
By April, the board confirmed the normal operation of its IT systems, with no cancellations or postponements of appointments or procedures directly linked to the attack.
We deeply regret the distress caused and have strived to be as transparent as possible while adhering to guidelines from Police Scotland, partner entities, and maintaining a strong focus on security,” stressed NHS Dumfries and Galloway.
In an update on April 23, the board announced that cyber criminals had released a “proof pack” of the pilfered data, containing details related to six specific patients.
As per the board, the original patient files remain intact and have not been tampered with or erased.
According to reports from malware experts, the INC Ransom group has previously targeted regions like the United States, Australia, and Europe.
Lily Zhou and PA Media contributed to this report.
