Alder Hey Children’s Hospital Trust has confirmed it has suffered a data breach after sensitive information including medical records was published on the dark web and shared on social media.
The trust updated its previous statements to confirm that it suffered a single cyber incident where threat actors were able to gain unlawful access to sensitive data through a digital gateway service.
The trust said the exposure has impacted patients from three facilities in the Liverpool area, with hackers able to steal data from Alder Hey Children’s NHS Foundation Trust, Liverpool Heart and Chest Hospital, and Royal Liverpool University Hospital (RLUH).
The trust has launched an investigation into the incident, which it says is still ongoing, to determine the specific details of the intrusion and establish exactly what types of data were taken.
According to the trust’s website, it provides care to more than 450,000 young people each year and employs over 4,000 staff, making it one of Europe's biggest and busiest children’s hospitals.
Liverpool Heart and Chest Hospital is relatively smaller, with just over 100,000 patients each year, including virtual appointments.
RLUH is the largest hospital in the region, caring for over 750,000 patients each year, although Alder Hey’s statement clarified that the incident only impacted a “small amount of data from Royal Liverpool University Hospital".
No hospital services were affected and continue to operate, with patients advised to continue attending appointments as they normally would do so.
“As part of our response to this threat we have made progress in securing impacted systems and ensuring the attackers do not have continued access. This means that we are in a position to begin to reconnect our systems when it is safe to do so,” the statement clarified.
The incident first came to light on 28 November after the threat actor Inc Ransom posted on its dark web leak site, claiming to have stolen sensitive patient records from Alder Hey.
RELATED WHITEPAPER
Alder Hey said it is still trying to establish whether or not the attacker did, in fact, obtain confidential data, but warned this process could take a while.
“We are continuing to take this issue very seriously while investigations continue into whether the attacker has obtained confidential data. The investigation into the data may take some time, and there is a possibility that the attacker may publish the data before our investigation is concluded.”
-
European financial firms are battling a huge rise in third-party breachesNews Growing vendor dependency has contributed to a marked rise in third-party breaches
-
‘We’ve got some fabulous conditions’: Salesforce UK chief exec Zahra Bahrololoumi touts the country's tech industry potentialNews The UK remains a “priority market” for Salesforce, according to its regional CEO
-
Two more NHS Trusts have been hit with cyber attacks – here’s what we know so farNews A flaw in a third-party device management tool appears to be the source of the incident
-
NHS England launches cyber charter to shore up vendor security practices
News Voluntary charter follows a series of high-profile ransomware attacks
-
NHS supplier hit with £3m fine for security failings that led to attack
News Advanced Computer Software Group lacked MFA, comprehensive vulnerability scanning and proper patch management
-
Cyber attack delayed cancer treatment at NHS hospital
News A cyber attack at Wirral University Teaching Hospital in 2024 delayed critical cancer treatment for patients, documents show.
-
Major incident declared as Merseyside hospitals hit by cyber attackNews The incident, which has led to cancelled appointments, is just the latest in a series of attacks on healthcare organizations
-
Thousands of procedures canceled at London hospitals as Qilin releases blood test dataNews The attack on blood testing company Synnovis continues to affect patients, while the ransomware group follows through with its threats
-
Ransomware group threatens to publish 3TB of stolen NHS Scotland data after posting proof of attackNews NHS Dumfries and Galloway has confirmed some of the sensitive data stolen during the 15 March attack has been published by a known ransomware operator
-
Attack on third-party software vendor disrupts NHS ambulance servicesNews The ambulance services serve more than 10 million people across the south of England
