Health board hit by cyber attack with ‘significant quantity’ of data at risk
NHS Dumfries and Galloway said on Friday that the attack was ‘focused and ongoing’.
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.NHS Dumfries and Galloway has been hit by a cyber attack, with the health board saying a “significant quantity” of data has been put at risk and services could potentially be disrupted.
In a statement posted to its website on Friday, the board said the attack was “focused and ongoing” and the files accessed could include “patient-identifiable and staff-identifiable data”, with NHS workers and the public encouraged to “be on their guard”.
The nature of the attack is currently unclear, but Scottish Health Secretary Neil Gray said the Scottish Government is offering support to the board.
The health board’s statement said: “NHS Dumfries and Galloway has been the target of a focused and ongoing cyber attack.
“This prompted a swift response in line with our established protocols, working with partner agencies including Police Scotland, the National Cyber Security Agency and the Scottish Government.
There is a risk that hackers have been able to acquire a significant quantity of data
“There may be some disruption to services as a result of this situation.
“During these incursions into our systems, there is a risk that hackers have been able to acquire a significant quantity of data.
“Work is continuing together with cyber security agencies to investigate what data may have been accessed, but we have reason to believe that this could include patient-identifiable and staff-identifiable data.
“Breach of confidential data is an incredibly serious matter. We are encouraging everyone, staff and public, to be on their guard for any attempt to access their systems or approaches from anyone claiming to be in possession of data relating to them.”
Police Scotland confirmed the attack had taken place.
Mr Gray said: “I am aware that NHS Dumfries and Galloway has been affected by an ongoing cyber attack.
“Scottish Government officials have been in close contact with the board, Police Scotland and other partners. including the National Crime Agency and NHS National Services Scotland (NSS).
“There are well established procedures for dealing with a situation of this kind. We are providing assistance and support to NHS Dumfries and Galloway as they handle this incident, and NHS NSS is engaging with the rest of NHS Scotland and providing updates as necessary.”
A spokeswoman from the National Cyber Security Centre said: “We are working with law enforcement, NHS Scotland and the Scottish Government to fully understand the impact of an incident.”