3TB Of NHS Scotland patient data released on the dark web

[Dos_Box]

IIRC, the hack had been public knowlege for some time, but the release of the data is new - https://ukdefencejournal.org.uk/huge-volume-of-nhs-patient-and-staff-data-released-by-hacker/

[flyinghaggis]

IIRC, the hack had been public knowlege for some time, but the release of the data is new - https://ukdefencejournal.org.uk/huge-volume-of-nhs-patient-and-staff-data-released-by-hacker/

 

That's quite disconcerting and must be a worry for patients in that region

 

Wonder how the hackers managed to access the data and if other NHS systems could be at risk?

 

https://www.bbc.co.uk/news/articles/cglvpnpxx87o

Edited May 8, 2024 by flyinghaggis

[Dos_Box]

I've been looking around to see who was in charge of hosting the data, whether it was the NHS itself or a commercial third party, but no joy yet, all the press reports seems to be just covering the basics.

[flyinghaggis]

I've been looking around to see who was in charge of hosting the data, whether it was the NHS itself or a commercial third party, but no joy yet, all the press reports seems to be just covering the basics.

 

Yeah, one to keep an eye on I think. The only update is from the UK National Cyber Security Centre (NCSC) who seem to be trying to down play the whole incident?

 

"Everyone's medical/private data is on the dark web, it's not a big deal, this happens all the time...":confused:

 

Cyber expert urges against 'panic' over NHS data leak

https://www.bbc.co.uk/news/articles/clw08q19n9ro

 

Mr Martin, who left the role in 2020 and is now a professor at the University of Oxford, said: "It's a very difficult situation but experience from the rest of the world suggests that even when this data is dumped on the dark web, relatively little direct harm occurs.

"A good example is Australia, where over a third of the population's full medical records were leaked onto the dark web."

Mr Martin said a concerted government-led effort minimised the impact of the Australian leak.

"Police and other authorities were clear that there'd be consequences if there was any sort of extortion," said Mr Martin.

"Although it's very unpleasant, the data just sort of sat there and there's no evidence of any direct harm, even though nearly 10 million people's full medical records were affected.

"People shouldn't panic. There isn't going to be a Google searchable database of people's medical records or people's bank details. That's not the way this works.

"It is relatively rare, not unknown, but relatively rare for individuals to suffer direct sort of harm, embarrassment or extortion."

Edited May 9, 2024 by flyinghaggis