NHS Cyber Attacks June 2024

There have been widespread attacks on health care institutions and their supply chains over the last 12 months.

As we approach the 2024 national election, the NHS has faced a significant impact from a cyber-attack on one of it’s supply chain partners, Synnovis. It's highlighted the vulnerabilities in their information security systems and demonstrates the level and potential for state actors in cyber crime in the UK. 

Evaluating your supply chain security is such a critical part of your due diligence, and must not be overlooked. The NCSC has called out the predictable rise in ransomware attacks so it’s something we need to guard against with proactive prevention and protection.

"Ransomware continues to be the most acute cyber threat facing UK organisations and businesses, with cyber criminals adapting their business models to gain efficiencies and maximise profits." NCSC, 2024

So, what's happened so far?

In short, the supplier Synnovis has been subject to:

1. A ransomware attack: The attackers encrypted vital information, rendering IT systems useless and demanding a ransom for their release.
2. Data theft: Sensitive patient data was stolen and downloaded to further extort the organisation and prove their claims.
3. Service disruption: The attack caused significant disruptions to the service Synnovis provides, which in turn impacted normal hospital operations, leading to the postponement of critical procedures, tests, diagnoses etc. Major London hospitals, including King’s College Hospital, Guy’s and St Thomas’, the Royal Brompton, and Evelina London Children’s Hospital, have been critically impacted since early June, causing widespread disruption. 

Impacts & Challenges

The impact of an attack on just one single supply chain partner has been devastating for the NHS and the patients it serves. It has had profound effects on patient care, regional health, and has disrupted critical services delaying essential medical procedures. 

Hospitals have faced significant operational challenges, with staff having to revert to manual processes, impacting the efficiency and safety of medical services. The incident has underscored the NHS's struggle to maintain robust cyber defences amidst it’s continuous financial constraints.

Enhancing NHS Cyber Security

Apart from the obvious due diligence around supply chain security, all organisations need to determine their level of risk, and protect themselves accordingly against such attacks. Taking a holistic approach, the NHS (and their suppliers) needs investment in several key areas:

• Advanced Cyber Security Tools: Implementing robust security measures such as multi-factor authentication, advanced firewalls, and intrusion detection systems.
• Regular Training: Ensuring all staff are trained on the latest cyber security practices and aware of potential threats.
• Incident Response Plans: Developing and maintaining comprehensive incident response plans to quickly address and mitigate the impact of cyber attacks.
• Investment in IT Infrastructure: Allocating sufficient budget to update and maintain secure and resilient IT infrastructure.
• Collaboration with Experts: Working closely with organisations like the National Cyber Security Centre to stay ahead of evolving threats.

This cyberattack has been a stark reminder of the critical importance of cyber security in protecting public health services. It exposes the dire consequences of neglecting cyber security, as the NHS grapples with cancelled operations, delayed treatments, and compromised patient data. 

The future 

To safeguard against future attacks and ensure the continuity of patient care, the NHS must prioritise strengthening its cyber defences through sustained investment, comprehensive staff training, and the implementation of cutting-edge security technologies.

Proactive collaboration with cyber security experts and continuous updating of cyber security protocols are essential steps to protect the NHS and its patients from the ever-evolving threat landscape. But this also needs investment, skills and expertise, and support from specialist service providers, and not forgetting compliance frameworks like Cyber Essentials + and others.