Children’s mental health records published after cyber attack

Updated 2 hours ago

NHS Dumfries and Galloway has confirmed some children’s mental health data has been published by criminals following a cyber attack.

A ransomware group targeted the health board earlier this year and has now published a large volume of patient data on an area of the internet called the dark web.

The health board’s chief executive Julie White said the hack was unprecedented and she apologised to patients and staff.

She said the number of people affected was still unknown but could be thousands.

Ms White described the data release as an “utterly abhorrent criminal act”.

She said work was now beginning with other national agencies including the Scottish government, police and National Cyber Security Centre to assess what has been published.

Ms White told BBC News that some children’s mental health dats had been published as a result of the hack.

“This could affect hundreds if not thousands of patients and staff across Dumfries and Galloway,” she added.

“At this point in time we are unable to give an exact figure.

“It is unlikely that it would affect every patient in Dumfries and Galloway but could affect significant quantities.

“What we’re fairly confident in at the moment is that the hackers were unable to access entire patient medical records.”

Rebecca Richardson, 51, of Stranraer said she was “very concerned” about what information the hackers might have got.

“We’ve not heard anything directly from the NHS and it raises my concerns and I know other people will be worried,” she said.

“Dumfries and Galloway have an elderly population who struggle with using online services, and this will reaffirm to them that online isn’t safe and can be manipulated.

“But it’s nigh on impossible to get a GP appointment so I’m not surprised we’ve heard so little, as they are not well resourced, and the buck stops with the government on sorting this out.”

Joe Lynch, 65, of the Rhins of Galloway, said: “I’ve been aware of this issue for a few weeks since it was first made public.

“It seemed to me of real concern but to me it’s been played down by the public sector.

“So far the NHS have pretended that there is nothing to see here, and play it down, but it’s like horses and stable doors.

“It’s clear what’s happened and that there’s a problem and we need some openness and transparency about what’s been stolen, how and what’s being done to resolve the problem.”

South of Scotland MSP Colin Smyth described the release of data as a “worrying development”.

The Labour MSP told the BBC’s Good Morning Scotland programme: “There is no doubt it will cause a great deal of anxiety for patients and staff of NHS Dumfries and Galloway.”

He added hackers had been able to access “a very substantial amount of data”, including contact details for both staff and patients.

Mr Smyth said: “It is important the NHS try to do what they did when the initial data was released – that is contact the individuals affected.

“But if they can’t do that because the data is so substantial it is very important the NHS make that clear at an early stage, and at the very least contact the most vulnerable people whose data may have been released onto the dark web.”