NHS Lanarkshire hit by ransomware cyber-attack

NHS trust was also a victim of WannaCry ransomware

Hospital IT

NHS Lanarkshire was hit by a ransomware attack last Friday which caused appointments and procedures to be cancelled.

The health board confirmed that the malware is a new version of Bitpaymer, but it's unclear how it infiltrated NHS Lanarkshire's network.

NHS Lanarkshire has a number of hospitals including Wishaw General, Hairmyres and Monklands. On Saturday, it published a statement on Facebook saying that the staffing system and telephone were offline and unavailable.

A spokesperson told IT Pro that since it was a new malware variant the latest security software was unable to detect it. Following analysis of the malware, it can now be detected and blocked by the health board.

The spokesperson added that staff had worked through the weekend to reinstate IT systems.

Chief executive Calum Campbell said: "We quickly identified the source of the malware and investigations are ongoing as to how this was able to infiltrate our network."

"Our staff have worked hard to minimise the impact on patients and our contingency plans have ensured we have been able to continue to deliver services while the IT issues were resolved," Campbell added. "A small number of systems were affected with the majority restored over the weekend and the remainder on Monday."

Campbell added that NHS Lanarkshire was working to reschedule appointments. 

In May, NHS Lanarkshire was one of almost 50 NHS Trust's affected by WannaCry, a ransomware attack which encrypted computers and left many unusable in different areas of the health service. The attack affected over 200,000 computers in 150 countries and demanded $300 to $600 for users to access their files. At the start of August, the attackers emptied their $140,000 Bitcoin wallets who were hoping to get hold of the money and hide their trail.

Marcus Hutchins, the British citizen who stopped the spread of WannaCry, was arrested in Las Vegas after being charged with creating and distributing a banking Trojan called Kronos. Hutchins has been free on bail since 5 August but is unable to leave the US and has been placed under electronic surveillance.

Featured Resources

Digital document processes in 2020: A spotlight on Western Europe

The shift from best practice to business necessity

Download now

Four security considerations for cloud migration

The good, the bad, and the ugly of cloud computing

Download now

VR leads the way in manufacturing

How VR is digitally transforming our world

Download now

Deeper than digital

Top-performing modern enterprises show why more perfect software is fundamental to success

Download now

Recommended

Bank-targeting malware disguises itself as video conferencing software
Security

Bank-targeting malware disguises itself as video conferencing software

19 Oct 2020
Your essential guide to internet security
Security

Your essential guide to internet security

23 Sep 2020
Best free malware removal tools 2020
Security

Best free malware removal tools 2020

21 Sep 2020
'NetWalker' ransomware explodes thanks to 'as a service' expansion
ransomware

'NetWalker' ransomware explodes thanks to 'as a service' expansion

4 Sep 2020

Most Popular

The enemy of security is complexity
Sponsored

The enemy of security is complexity

9 Oct 2020
The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

5 Oct 2020
What is a 502 bad gateway and how do you fix it?
web hosting

What is a 502 bad gateway and how do you fix it?

5 Oct 2020