Hackers potentially have obtained personal files from NHS Dumfries and Galloway

The health board warn us that there might be some disruption to services.

NHS Dumfries and Galloway
Author: Ruth RidleyPublished 15th Mar 2024
Last updated 15th Mar 2024

NHS Dumfries and Galloway is issuing an urgent warning to patients that it has been the victim of a cyber attack.

This intrusion into their systems raises concerns for hackers being able to obtain a significant amount of data.

The health board is working with partner agencies including Police Scotland, the National Cyber Security Centre, and the Scottish Government to investigate what information has been accessed.

They say that they: “have reason to believe that this could include patient-identifiable and staff-identifiable data.”

It is unknown how much information has been accessed by the hackers, but health officials say there could be some disruption to services as a result of this situation.

Everyone is being encouraged to be extra vigilant and keep an eye out for anyone posing to have information related to them.

Investigation of serious breach

NHS Dumfries and Galloway released a statement saying: "Work is continuing together with cyber security agencies to investigate what data may have been accessed, but we have reason to believe that this could include patient-identifiable and staff-identifiable data.

"Breach of confidential data is an incredibly serious matter.

"We are encouraging everyone, staff and public, to be on their guard for any attempt to access their systems or approaches from anyone claiming to be in possession of data relating to them."

In any of these situations, contact Police Scotland immediately by phoning 101.

A dedicated web-page has been established on the NHS Dumfries and Galloway website here.

Health Secretary reaction

Scotland's Health Secretary Neil Gray said: "Scottish Government officials have been in close contact with the board, Police Scotland and other partners. including the National Crime Agency and NHS National Services Scotland (NSS).

"There are well established procedures for dealing with a situation of this kind. We are providing assistance and support to NHS Dumfries and Galloway as they handle this incident, and NHS NSS is engaging with the rest of NHS Scotland and providing updates as necessary."

A spokeswoman from the National Cyber Security Centre said: "We are working with law enforcement, NHS Scotland and the Scottish Government to fully understand the impact of an incident."

Worrying for patients

South Scotland MSP Colin Smyth reacted saying: “This is a worrying time for anyone whose records are held by the NHS, and it is vital those impacted are kept fully informed by NHS Dumfries and Galloway on how this may affect patients and staff and what action is being taken to secure sensitive data.

“The heath board and Scottish Government need to come clean as quickly as possible on exactly what information has been stolen and who has been affected.”