Data from a ransomware attack has allegedly been published online weeks after the attack halted operations and tests in major London hospitals, NHS England has said.
A Russian group is believed to have carried out the cyber-attack on Synnovis, a private pathology firm that analyses blood tests for Guy’s and St Thomas’ NHS foundation trust (GSTT) and King’s College trust, on 3 June, forcing hospitals in the capital to cancel almost 1,600 operations and outpatient appointments.
NHS England said on Friday it had “been made aware that the cyber-criminal group published data last night which they are claiming belongs to Synnovis and was stolen as part of this attack. We know how worrying this development may be for many people. We are taking it very seriously.”
In the attack, it is understood hackers from the Russian-based ransomware criminal group Qilin infiltrated Synnovis’s IT system and locked the computer system by encrypting its files to extort a payment for restoring access. The trusts have contracts with Synnovis totalling just under £1.1bn for services that are vital to the smooth running of the NHS.
NHS England said an analysis of the data was under way involving the National Cyber Security Centre and other partners to confirm whether the data was taken from Synnovis’s systems and what information it contained.
It remains unclear whether Qilin has stolen NHS patient data alongside disabling Synnovis’s systems. Such postings are usually made as a blackmail negotiation tactic, letting it be known that data has been stolen but any requested ransom has not been paid.
When the hack began, seven hospitals run by two NHS trusts experienced serious disruption to their services, including cancelling or moving elective operations. Two major acute hospital trusts in London postponed 832 surgical procedures, including cancer surgery and organ transplants among others, between 3 June and 9 June.
The disruption affected hospitals including Guy’s, St Thomas’ and King’s College, as well as the Evelina children’s hospital, Royal Brompton, the Harefield specialist heart and lung hospitals and the Princess Royal hospital in Orpington.