London's largest hospital hacked, sensitive data released
The National Health Service (NHS) has revealed that sensitive medical data on British patients has been released after a cyber attack on a provider earlier this month that continues to disrupt the operations of major hospitals in London.
The service announced that "the National Health Service in England has been informed that a group of cybercriminals published data on Thursday evening claiming to belong to the supplier Synnovis and that it was stolen during this attack."
The BBC reported that the Russian cybercriminal group "Kilin" is behind this attack.
The group published nearly 400 gigabytes of data - including patient names, dates of birth, NHS registration numbers and details of blood tests - on Thursday night on its own website on the dark web and via its Telegram channel.
The NHS said: “We understand this may raise concerns and are continuing to work with Synovis, the National Cyber Security Centre and other partners to report the contents of the files as quickly as possible” and verify that they are indeed Synovis data.
The major cyber attack on the blood testing company on 3 June has had a “significant impact” on many services, including blood transfusions.
Operations at central London hospitals including King’s College, Guy’s and St Thomas’ have also been affected, with thousands of appointments and operations cancelled in the past two weeks.