Alder Hey Children’s Hospital Trust has confirmed it has suffered a data breach after sensitive information including medical records was published on the dark web and shared on social media.
The trust updated its previous statements to confirm that it suffered a single cyber incident where threat actors were able to gain unlawful access to sensitive data through a digital gateway service.
The trust said the exposure has impacted patients from three facilities in the Liverpool area, with hackers able to steal data from Alder Hey Children’s NHS Foundation Trust, Liverpool Heart and Chest Hospital, and Royal Liverpool University Hospital (RLUH).
The trust has launched an investigation into the incident, which it says is still ongoing, to determine the specific details of the intrusion and establish exactly what types of data were taken.
According to the trust’s website, it provides care to more than 450,000 young people each year and employs over 4,000 staff, making it one of Europe's biggest and busiest children’s hospitals.
Liverpool Heart and Chest Hospital is relatively smaller, with just over 100,000 patients each year, including virtual appointments.
RLUH is the largest hospital in the region, caring for over 750,000 patients each year, although Alder Hey’s statement clarified that the incident only impacted a “small amount of data from Royal Liverpool University Hospital".
No hospital services were affected and continue to operate, with patients advised to continue attending appointments as they normally would do so.
“As part of our response to this threat we have made progress in securing impacted systems and ensuring the attackers do not have continued access. This means that we are in a position to begin to reconnect our systems when it is safe to do so,” the statement clarified.
The incident first came to light on 28 November after the threat actor Inc Ransom posted on its dark web leak site, claiming to have stolen sensitive patient records from Alder Hey.
RELATED WHITEPAPER
Alder Hey said it is still trying to establish whether or not the attacker did, in fact, obtain confidential data, but warned this process could take a while.
“We are continuing to take this issue very seriously while investigations continue into whether the attacker has obtained confidential data. The investigation into the data may take some time, and there is a possibility that the attacker may publish the data before our investigation is concluded.”
-
Google tells some remote workers to return to the office or risk losing jobsNews Google has warned remote workers will need to return to the office or else lose their jobs, according to reports.
-
IBM puts on a brave face as US government cuts hit 15 contractsNews Despite the cuts, IBM remains upbeat after promising quarterly results
-
NHS supplier hit with £3m fine for security failings that led to attackNews Advanced Computer Software Group lacked MFA, comprehensive vulnerability scanning and proper patch management
-
Cyber attack delayed cancer treatment at NHS hospital
News A cyber attack at Wirral University Teaching Hospital in 2024 delayed critical cancer treatment for patients, documents show.
-
Major incident declared as Merseyside hospitals hit by cyber attackNews The incident, which has led to cancelled appointments, is just the latest in a series of attacks on healthcare organizations
-
Thousands of procedures canceled at London hospitals as Qilin releases blood test dataNews The attack on blood testing company Synnovis continues to affect patients, while the ransomware group follows through with its threats
-
Ransomware group threatens to publish 3TB of stolen NHS Scotland data after posting proof of attackNews NHS Dumfries and Galloway has confirmed some of the sensitive data stolen during the 15 March attack has been published by a known ransomware operator
-
Attack on third-party software vendor disrupts NHS ambulance servicesNews The ambulance services serve more than 10 million people across the south of England
-
NHS data leak raises ‘serious questions’ about Manchester University cyber attackNews NHS patient data used for research purposes is believed to have been compromised in the June attack
-
Cyber attack on software supplier causes "major outage" across the NHSNews Unconfirmed reports suggest the attack may be ransomware-related, while the NHS contends with disrupted services on the 111 non-emergency line
