London NHS hospital trust hit by cyber-attack

The largest NHS trust in England has been hit by a cyber-attack that could affect thousands of files across at least four London hospitals.

Barts health trust, which runs five hospitals in east London – the Royal London, St Bartholomew’s, Whipps Cross, Mile End and Newham – has sent a message to staff urging them not to open email attachments from unknown senders.

It was reported that the trust had been targeted with ransomware, which is normally delivered via emails that trick the recipient into opening attachments and releasing malware on to their system, in a technique known as phishing.

The trust has not confirmed those reports or said how much of its system has been affected by the attack or whether patient data has been compromised.

A spokeswoman said: “We are urgently investigating this matter and have taken a number of drives offline as a precautionary measure.

“We have tried and tested contingency plans in place and are making every effort to ensure that patient care will not be affected.”

According to the Health Service Journal, the trust’s filing system between departments has been turned off while the investigation takes place.

Staff at the Royal Free London foundation trust were also warned to beware of attacks on Friday, the Guardian has learned.

“We have been informed of a major cyber-attack on NHS organisations. Please exercise extreme caution when opening any email attachments from unknown source or that don’t seem relevant to you. We will be carrying out security scans on all computers within the trust so please leave them switched on until further notice,” wrote the trust’s IT director, Tosh Mondal.

A spokesman said the email was in reaction to the Barts attack and that the Royal Free London, as well as Barnet and Chase Farm hospitals, had not been affected.

In October the Northern Lincolnshire and Goole foundation trust was hit by an attack in which malware was used to encrypt files and demand a ransom in order to restore access. The trust did not pay the ransom but was forced to cancel patient appointments as its systems were shut down to remove the virus.

John Bambenek, a threat intelligence manager at the firm Fidelis Cybersecurity, said: “The trouble is that local authorities and governments aren’t very prepared and they have extremely valuable information that simply can’t be lost, so they’re a tempting target for cybercriminals.

“Cyber defence is essential, but it’s no longer enough; organisations of all sizes need to invest in detecting threats as well. Only then will cyber criminals be caught early enough to expel them from the network before serious damage is done.”

London NHS hospital trust hit by cyber-attack