Records on 300m patient interactions with NHS stolen in Russian hack

[helvella]

This is much more than just a simple update, it is a major development in the Synnovis hack case.

Records on 300m patient interactions with NHS stolen in Russian hack

Exclusive: health service scrambling to set up helpline after Qilin gang put stolen data into public domain overnight

Russian hackers have stolen records covering 300m patient interactions with the NHS, including the results of blood tests for HIV and cancer, the Guardian can reveal.

The amount and sensitive nature of the data obtained by the Qilin hacking gang has caused alarm among NHS bosses, who are scrambling to set up a helpline to deal with inquiries from what could be a large number of worried patients and also health service staff.

Seven hospitals run by two NHS trusts were affected by the attack, which targeted Synnovis, a private/NHS joint venture that provides pathology services such as blood tests and transfusions. It is unclear at this stage if the hack involves only hospitals in the trusts or is more widespread.

The NHS’s anxiety about the impact of the attack increased on Friday after Qilin acted overnight on a threat to put stolen NHS data into the public domain, an indication that Synnovis has refused to pay a reported $50m (£40m) ransom.

It is as yet unclear exactly what data, or how much of the haul, the ransomware group has made public. But the stolen data includes details of the results of blood tests conducted on patients having many types of surgery, including organ transplants, or suspected of having a sexually transmitted infection, or who have had a blood transfusion, well-placed sources have disclosed.

In a development that will cause anxiety among patients who have received private healthcare in recent years, Qilin’s haul is understood to include records of tests that people have had at multiple private healthcare providers. It is not clear which private healthcare firms Synnovis – a joint venture between the pathology firm Synlab and two major London acute hospital trusts – works for.

The number of test results in the data that Qilin seized in the hack on 3 June is so huge because it covers tests that patients have had going back a significant number of years, sources say.

The article continues here:

theguardian.com/society/art...

A possibly more technical view at TheRegister:

Qilin: We knew our Synnovis attack would cause a healthcare crisis at London hospitals

Cybercriminals claim they used a zero-day to breach pathology provider’s systems

Connor Jones

Thu 20 Jun 2024 // 10:29 UTC

Interview The ransomware gang responsible for a healthcare crisis at London hospitals says it has no regrets about its cyberattack, which was entirely deliberate, it told The Register in an interview.

Qilin says Synnovis, a partnership between pathology services company Synlab and two London NHS Trusts, wasn't targeted by accident. Asked if it knew a healthcare crisis in the UK capital would ensue as a result of its attack on that organization, should they be successful, a spokesperson for the group said: "Yes, we knew that. That was our goal."

Rest of article here:

theregister.com/2024/06/20/...

Despite the seriousness, my sarcastic side can't help but contrast the lack of access many of us have to our health records with the ability of the Russian hackers to access and publish them.

[RedApple Administrator]

helvella 'my sarcastic side can't help but contrast the lack of access many patients have to their health records with the ability of the Russian hackers to access and publish them.'

So true!

😱

[TSH110 in reply to RedApple]

Very good point

[LindaC in reply to RedApple]

Just wondering if they know more about the thyroid than... !? 😂

[helvella Administrator Thyroid UK]

Synnovis cyber incident

Public statement - Synnovis cyber incident

Updates on cyber incident

Update - 21 June 2024, 9am

On 3 June, Synnovis, a pathology laboratory which processes blood tests on behalf of a number of NHS organisations, primarily in South East London, was the victim of a cyber attack.

NHS England has been made aware that the cyber criminal group published data last night which they are claiming belongs to Synnovis and was stolen as part of this attack.

We understand that people may be concerned by this and we are continuing to work with Synnovis, the National Cyber Security Centre and other partners to determine the content of the published files as quickly as possible. This includes whether it is data extracted from the Synnovis system, and if so whether it relates to NHS patients.

As more information becomes available through Synnovis’ full investigation, the NHS will continue to update patients and the public.

The attack is being investigated by law enforcement agencies.

digital.nhs.uk/news/synnovi...

[Mlinde]

I don't suppose the hack has anything to do with the recent privatisation of NHS blood services? On going to get my annual test, the employee of what is now US-owned Synovis, told me that Synovis flew in 5000 US employess to oversee the theft, sorry, takeover.

[humanbean in reply to Mlinde]

I hadn't heard about that. Thanks for the heads up.

[Guineapiggy]

I was going to sign up for the "Our Future Health" program but things like this have made me decide not to as our data is not secure.

[buddy99]

I'm sorry, but I had to laugh about that. I know it's a serious matter, but I imagined the Russians looking at records, shaking their head and going, "What are those doctors doing to those poor people?!" Also, I wish I could hack into my records instead of the paperwork I have to fill out each time I want a peek.

[dunestar]

It's clear the NHS needs to ask serious questions about data security systems when they are choosing partners. Their own systems are probably no better.