Hackers threaten to release stolen NHS patient and staff data

A ransomware group claiming to have accessed three terabytes of data at NHS Dumfries & Galloway published a selection of letters and medical reports as ‘proof’
Sian Bradley
The Times
The NHS Dumfries & Galloway health board was hit by the cyberattack this month, which it said at the time had put a “significant amount” of data at risk
The NHS Dumfries & Galloway health board was hit by the cyberattack this month, which it said at the time had put a “significant amount” of data at risk
ALAMY
Sian Bradley
The Times

Cybercriminals are claiming to have accessed three terabytes of NHS patient and staff data and are threatening to release it unless their demands are met.

The hackers posted “a smaller number” of patients’ personal letters and medical reports online to prove that they had successfully breached security at NHS Dumfries & Galloway.

The INC ransomware group posted a “proof pack” on its website on the dark web on Tuesday alongside a claim that it had infiltrated the health board’s systems. It did not specify a deadline for a ransom payment to be provided.

Jeff Ace, chief executive of NHS Dumfries & Galloway, confirmed that the police and government were involved
Jeff Ace, chief executive of NHS Dumfries & Galloway, confirmed that the police and government were involved

The proof pack featured a variety of sensitive documents including letters between doctors discussing patient treatments and psychological reports. They included names and addresses of patients.

INC Ransom is an elusive group