As the event unfolds, descriptions are emerging of hospitals across England being simultaneously hit by a ‘cyber attack’ which has rendered a number of IT systems unusable. NHS England has said that it is aware of disruption and is investigating the issue.
Meanwhile, reports are emerging from those inside affected units that indicate the some of the attacks are for ‘ransom’. Twitter user @asytoly posted an image of a WhatsApp conversation apparently with an insider from an affected unit detailing that, “computers are now under their control”, and, “now everything is gone”.
Why would you cyber attack a hospital and hold it for ransom? The state of the world ? pic.twitter.com/e6h6yNrBBB
— If.ra (@asystoly) May 12, 2017
Another picture, posted by the BBC’s technology correspondent Rory Cellan-Jones captioned seems to show some form of ransomware programme, demanding a Bitcoin payment to decrypt and save locked files.
Here’s what a London GP sees when trying to connect to the NHS network pic.twitter.com/lV8zXarAXS
— Rory Cellan-Jones (@ruskin147) May 12, 2017
UPDATE #1
@DCHStrust (Derbyshire community health services NHS trust, said on twitter: “We are aware of a major IT secure system attack. All IT systems have been temporarily shut down. More information will be available shortly”.
We are aware of a major IT secure system attack. All IT systems have been temporarily shut down. More information will be available shortly
— DCHS NHS FT (@DCHStrust) May 12, 2017
Also on Twitter Chief Executive of Derbyshire Community Health Services Tracy Allen said: “Thx to everyone @DCHStrust managing contingency plans re. IT shutdown. Far reaching consequences of the protective action being taken.”
Thx to everyone @DCHStrust managing contingency plans re. IT shutdown. Far reaching consequences of the protective action being taken.
— Tracy Allen (@TracyAllenDCHS) May 12, 2017
In a message to a Guardian reporter, one NHS IT worker said: “At approximately 12.30pm we experienced a problem with our email servers crashing. Following this a lot of our clinical systems and patient systems were reported to have g Derbyshire Community Health Services NHS Foundation Trustone down.”
“This is affecting the east of England and number of other trusts. This is the largest outage of this nature I’ve seen in the six years I’ve been employed with the NHS.”
The issue could be related to a concurrent ransomware outbreak attacking Spanish telecommunications provider Telefónica. The giant’s IT staff are apparently warning employees to shut down computers and VPN connections to limit the attack’s reach.
UPDATE #2
The NHS has released a statement, reporting that the attack is believed to be a malware variant of Wanna Decryptor. According to the NHS, no patients have been compromised, however investigations are ongoing as to the severity of the breach.
NHS Digital has confirmed that it is now working with the National Cyber Security Centre, the Department of Health and NHS England to support stricken units and decide the appropriate measures to mitigate the attack.
While the NHS was not the only sector to have been attacked, at least 16 NHS organisations have reported outages.





