Patient and staff data ‘at risk’ after cyber attack on NHS health board

NHS Dumfries and Galloway has been hit by a cyber attack, with the health board saying a “significant quantity” of data has been put at risk and services could potentially be disrupted.

In a statement posted to its website yesterday, the board said the attack was “focused and ongoing” and the files accessed could include“patient identifiable and staff identifiable data ”, with NHS workers and the public encouraged to “be on their guard”.

The nature of the attack is currently unclear, but Scottish Health Secretary Neil Gray said the Scottish Government is offering support to the board.

The health board’s statement said: “NHS Dumfries and Galloway has been the target of a focused and ongoing cyber attack.

“This prompted a swift response in line with our established protocols, working with partner agencies including Police Scotland, the National Cyber Security Agency and the Scottish Government.

“There may be some disruption to services as a result of this situation.

“During these incursions into our systems, there is a risk that hackers have been able to acquire a significant quantity of data.

“Work is continuing together with cyber security agencies to investigate what data may have been accessed, but we have reason to believe that this could include patient-identifiable and staff-identifiable data.

“Breach of confidential data is an incredibly serious matter. We are encouraging everyone, staff and public, to be on their guard for any attempt to access their systems or approaches from anyone claiming to be in possession of data relating to them.”

Police Scotland confirmed the attack had taken place.

Mr Gray said: “Scottish Government officials have been in close contact with the board, Police Scotland and other partners. including the National Crime Agency and NHS National Services Scotland (NSS).”

“There may be some disruption to services as a result of this situation