Irish Health Service hit by ransomware attack
Friday's outpatient medical appointments have been postponed or cancelled
Ireland’s national health and social services provider, the Health Service Executive (HSE), has been forced to shut down its entire IT system following a ransomware attack.
The shutdown, which was done as a precaution, has led to outpatient medical appointments being postponed or cancelled.
However, HSE Chief Executive Paul Reid told Irish national broadcaster RTE that the country’s vaccination programme hadn’t been impacted by the cyber attack.
"The vaccination programme continues thankfully, it's a separate system,” he said.
Reid described the attack as “very sophisticated” and “not just the standard attack”.
“It is impacting all of our national and local systems that would be involved in all of our core services," he added. The perpetrator has not been named and HSE was not immediately available for comment.
The ransomware attack on HSE immediately drew comparisons to a similar incident that had affected its UK counterpart. Commenting on the news, Orange Cyberdefense UK director Stuart Reed said that the attack “comes almost exactly four years from the 12 May 2017 WannaCry ransomware attack on the NHS, which devastated services”.
The attack, which took place during the week between 12 and 18 May 2017, is thought to have affected over 200,000 computer systems across the world, disrupted the services of one-third of the UK's hospital trusts, and approximately 8% of GP clinics. It's believed that around 19,000 hospital appointments were cancelled as a result.
RELATED RESOURCE
2021 state of email security report: Ransomware on the rise
Securing the enterprise in the COVID world
A subsequent investigation conducted by the Department of Health and Social Care found that the ransomware attack had cost the NHS an estimated total of £92 million, with the biggest cost being attributed to restoring its services to full operation and to the recovery of data.
With Reuters reporting that a Dublin hospital was forced to cancel all outpatient appointments apart from the most urgent cases, Reed said that “national critical services must ensure they have a well-defined incident response plan, should the worst happen, to ensure a continuation of vital services”.
“As ransomware attacks continue to gather momentum - this being the second in just one week, following the US Colonial Pipeline attack - hospitals and other critical services need to prioritise protecting themselves against these callous attacks, even on limited resources,” he added.
-
Dell Technologies World 2026: all the news, updates, and announcements from the Day 1 keynoteKeep up to date with all the news as it happens live from Dell Technologies World 2026 in Las Vegas
-
Hospital cyber attacks are increasingly hitting patient careNews New research shows only 14% are confident they can lose access to health records for 72 hours without risk to patients
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
-
Threat actors ditch ‘spray and pray’ attacks in shift to targeted exploitationNews A dip in ransomware volumes points to a more targeted approach focused on vulnerability exploitation
-
Security leaders overconfident about ransomware recoveryNews Few manage to recover all their data, and many experience business disruption
-
German authorities want your help finding the hackers behind GandCrab and REvilNews Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk are believed to have made millions from ransomware as a service schemes
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in life
News With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
-
Ransomware gangs are using employee monitoring software as a springboard for cyber attacks
News Two attempted attacks aimed to exploit Net Monitor for Employees Professional and SimpleHelp
-
Ransomware gangs are sharing virtual machines to wage cyber attacks on the cheap – but it could be their undoingNews Thousands of attacker servers all had the same autogenerated Windows hostnames, according to Sophos
