NHS gets £21m to boost cyber defences after WannaCry ransomware

Government funding comes hand-in-hand with stricter data security measures

NHS hospitals will receive 21 million to upgrade their cyber security measures following the WannaCry attacks that wreaked havoc on NHS IT systems earlier this summer.

The Department for Health (DfH) announced the funding yesterday as the government accepted all the recommendations set out by the National Data Guardian review and the Care Quality Commission review into data security standards, carried out before the ransomware debacle.

Health minister Lord O'Shaughnessy said in a statement: "The NHS has a long history of safeguarding confidential data, but with the growing threat of cyber attacks including the WannaCry ransomware attack in May, this government has acted to protect information across the NHS.

"Only by leading cultural change and backing organisations to drive up security standards across the health and social care system can we build the resilience the NHS needs in the face of a global threat."

Advertisement - Article continues below
Advertisement - Article continues below

The 21 million will be spent on increasing cyber security measures of major trauma hospitals, with the government calling this "an immediate priority", as well as boosting NHS Digital's national monitoring and response capabilities.

It also prioritised finding a way to finally migrate NHS systems from Windows XP, the Microsoft operating system that expired three years ago.

XP was at first identified as a prime attack vector for the WannaCry ransomware attacks in May due its lack of security updates, until Kaspersky Lab discovered that the in-support Windows 7 accounted for 97% of operating system among affected machines.

WannaCry locked NHS files, demanding a ransom be paid to unlock them again, causing chaos for 48 hospitals relying on this data for upcoming operations and appointments, many of which had to be cancelled.

The DfH also said NHS trusts will have to bring their policies in line with the National Data Guardian's recommendations - outlined in a report last year - that are designed to bolster healthcare data protection standards.

These include carrying out security training for staff, reviewing processes annually, and drawing up contingency plans for data security threats.

Advertisement - Article continues below

NHS Digital will support hospitals by carrying out on-site assessments and sharing best practice among UK trusts, as well as raising general awareness through broadcast ads and providing a hotline for dealing with cyber incidents.

The funding and stricter cyber security measures were part of a response to the CQC and National Data Guardian's reviews, which had warned of the likelihood of an impending cyber threat.

In the fallout after the WannaCry attacks, the Chartered Institute of IT blamed the security breaches on a lack of investment and accountability for IT security measures within the NHS.

Picture: Bigstock

Featured Resources

Digitally perfecting the supply chain

How new technologies are being leveraged to transform the manufacturing supply chain

Download now

Three keys to maximise application migration and modernisation success

Harness the benefits that modernised applications can offer

Download now

Your enterprise cloud solutions guide

Infrastructure designed to meet your company's IT needs for next-generation cloud applications

Download now

The 3 approaches of Breach and Attack Simulation technologies

A guide to the nuances of BAS, helping you stay one step ahead of cyber criminals

Download now



How can you protect your business from crypto-ransomware?

4 Nov 2019

Hackers abuse LinkedIn DMs to plant malware

25 Feb 2019

Health Secretary bans pagers from NHS hospitals

25 Feb 2019

Best free malware removal tools 2019

23 Dec 2019

Most Popular

mergers and acquisitions

Xerox to nominate directors to HP's board – reports

22 Jan 2020
operating systems

17 Windows 10 problems - and how to fix them

13 Jan 2020
public sector

UK gov launches £300,000 SEN EdTech initiative

22 Jan 2020
web browser

What is HTTP error 503 and how do you fix it?

7 Jan 2020