NHS hospitals targeted in major cyber attack

NHS England says hospitals are now returning to normal following last Friday's (12 May 2017) cyber attack, which saw almost 50 Trusts targeted.

NHS hospitals across England were hit by the attack with hackers demanding a ransom to unencrypt files. 

According to the BBC, Trusts and hospitals in London, Blackburn, Nottingham, Cumbria and Hertfordshire were affected.

Some GP surgeries were told to shut down phone and IT systems while A&Es told people not to attend unless it was a real emergency.

Dr Anne Rainsberry, NHS incident director, said: "Patients are no longer being diverted away from hospital accident and emergency units and, while there is still some disruption in a small number of areas, most patients are being treated as normal.

"We are grateful for the hard work of staff at trusts and GP practices who are still suffering IT issues but have found ways to work around this, as well as the patience of people who have been affected."

On Friday (12 May), NHS Digital said it believed the malware variant was Wanna Decryptor - ransomware which locks users' files and demands a payment to allow access. 

In a statement issued on Saturday (13 May), it said: "We are continuing to work around the clock to support NHS organisations that have reported any issue due to yesterday's cyber-attack. We have received no reports of patient data being compromised.

"We are aware of widespread speculation about the use of Microsoft Windows XP by NHS organisations, who commission IT systems locally depending on population need.

"While the vast majority are running contemporary systems, we can confirm that the number of devices within the NHS that reportedly use XP has fallen to 4.7%, with this figure continuing to decrease.

"This may be because some expensive hardware (such as MRI scanners) cannot be updated immediately, and in such instances organisations will take steps to mitigate any risk, such as by isolating the device from the main network.

"Our focus remains on assisting organisations, working closely with the National Cyber Security Centre, the Department of Health, NHS England and NHS Improvement."

David Evans, director of policy and community at BCS, The Chartered Institute for IT, said: “As news continues to break about this attack, we are reminded that there are some very sick and warped individuals in this world who would seek to put people’s safety and wellbeing at risk in return for money. The fact that some trusts have, as a result of this attack, had to turn patients away and put services on an emergency footing shows the reliance and trust placed on information and technology.

“Unfortunately, any system can be hacked, and that is why Trusts must recognise how important it is that they support IT professionals who can protect and defend against such heinous attacks. The IT profession in health and care also needs to step up and meet that challenge.”

NHS Digital has released guidance for the NHS on protecting against cyber attacks and this can be accessed here

 

Latest Issues

EBME Expo 2026

Coventry Building Society Arena, Coventry
24th – 25th June 2026

AfPP Regional Conferences: Manchester

INNSiDE by Meliá Manchester
20th June 2026

Endoscopic Anterior Skull Base Surgery: Hands-On Cadaveric Course

Division of Anatomy, University of Leeds
29th- 30th June 2026

BLOCKED – Advanced+ | The Wrightington Regional Anaesthesia Interest Group Cadaveric Course

Wrightington Conference Centre
Tuesday 7th – Wednesday 8th July 2026

AESCULAP ACADEMY LIVE - Circular Economy in Action

B. Braun Business Centre, Sheffield
Friday 10th July 2026

AfPP Regional Conferences: Bristol

BAWA Leisure
18th July 2026