Ransomware in UK Hospitals

The request was successful.

Dear Royal Cornwall Hospitals NHS Trust,

1. In the last 5 years, how many times has your trust/hospital suffered from a ransomware attack? Please provide specific dates (months/years) if possible.
2. How much downtime did this cause (in hours)?
3. Did you pay the ransom? If so, how much was the ransom?
4. What was the total cost of the incident to your hospital/trust?

All of the data gathered will be anonymised in our final analysis and no individual trusts will be mentioned.

Yours faithfully,

Rebecca Moody

FOI (ROYAL CORNWALL HOSPITALS NHS TRUST), Royal Cornwall Hospitals NHS Trust

Dear Ms Moody

FREEDOM OF INFORMATION ACT 2000 - INFORMATION REQUEST Ref:  8075

Thank you for your request for information as detailed below (if I have
misunderstood any part of your request, please let me know as soon as
possible, otherwise I shall continue to retrieve the information as
outlined):

 

1)     In the last 5 years, how many times has your trust/hospital
suffered from a ransomware attack? Please provide specific dates
(months/years) if possible.

2)     How much downtime did this cause (in hours)?

3)     Did you pay the ransom? If so, how much was the ransom?

4)     What was the total cost of the incident to your hospital/trust?

 

Your request was received on 14^th October 2019 and I am dealing with it
under the terms of the Freedom of Information Act 2000.

In some circumstances a fee may be payable and if that is the case I will
let you know. A fees notice will be issued to you, and you will be
required to pay before I will proceed to deal with your request.

You will receive the information requested within 20 working days unless
the Royal Cornwall Hospital does not hold the information or there is a
reason for it to be withheld. I will write to you in any event.

If you have any requirements regarding the format any information should
be supplied in, e.g. the language to be used, audio, large print and so
on, then please let me know.

Further information about your rights is also available from the
Information Commissioner at:

 

Information Commissioner's Office Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Telephone: 0303 123 1113 or 01625 54 57 45

[1]www.ico.gov.uk

 

In the meantime, please do not hesitate to contact me if you have any
queries or concerns (please remember to quote the reference number in any
future correspondence).

 

Yours sincerely

 

Jemma Dunstan

Information Governance Team

 

show quoted sections

FOI (ROYAL CORNWALL HOSPITALS NHS TRUST), Royal Cornwall Hospitals NHS Trust

1 Attachment

The RCHT are always looking to improve the service that we provide and
would welcome any feedback that you wish to give about your experience
dealing with FOI.  Please take a few moments to complete an anonymous
survey so that we can take into consideration your comments: 
[1]https://www.surveymonkey.com/r/Y7T2N78

 

Dear Ms Moody

 

FREEDOM OF INFORMATION ACT 2000 - INFORMATION REQUEST Ref:  8075  

Your request for information has now been considered and the response is
attached.

 

If you have any queries or concerns then please do not hesitate to contact
me (please remember to quote the reference number above in any future
communications).

If you are unhappy with the service you have received in relation to your
request and wish to make a complaint or request a review of our decision,
you should write to the Information Governance Manager, Kedhlow Building,
Royal Cornwall Hospital, Truro, Cornwall, TR1 3LJ or
e-mail [2][Royal Cornwall Hospitals NHS Trust request email]

If you are not content with the outcome of your complaint or review, you
may apply directly to the Information Commissioner for a decision.
Generally, the ICO cannot make a decision unless you have exhausted the
complaints procedure provided by the Royal Cornwall Hospital.

 

The Information Commissioner can be contacted at:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Telephone: 0303 123 1113 or 01625 54 57 45

[3]www.ico.gov.uk

 

Yours sincerely

Jemma Dunstan 

 

 

 

show quoted sections

Dear Jemma,

Thank you so much for your prompt response. Is it possible to provide me with the month and/or year of the attack, please?

Thanks!
Rebecca

FOI (ROYAL CORNWALL HOSPITALS NHS TRUST), Royal Cornwall Hospitals NHS Trust

 

Dear  Ms Moody

FREEDOM OF INFORMATION ACT 2000 - INFORMATION REQUEST Ref: 8075   

Thank you for your Internal Review Request for information as detailed
below (if I have misunderstood any part of your request, please let me
know as soon as possible, otherwise I shall continue to retrieve the
information as outlined):

 

1)      Is it possible to provide the month and/or year of the attack

 

Your request was received on 24^th October 2019 and I am dealing with it
under the terms of the Freedom of Information Act 2000.

In some circumstances a fee may be payable and if that is the case I will
let you know. A fees notice will be issued to you, and you will be
required to pay before I will proceed to deal with your request.

You will receive the information requested within 20 working days unless
the Royal Cornwall Hospital does not hold the information or there is a
reason for it to be withheld. I will write to you in any event.

If you have any requirements regarding the format any information should
be supplied in, e.g. the language to be used, audio, large print and so
on, then please let me know.

Further information about your rights is also available from the
Information Commissioner at:

 

Information Commissioner's Office Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Telephone: 0303 123 1113 or 01625 54 57 45

[1]www.ico.gov.uk

 

In the meantime, please do not hesitate to contact me if you have any
queries or concerns (please remember to quote the reference number in any
future correspondence).

 

Yours sincerely

 

Jemma Dunstan

Information Governance Team

 

show quoted sections

FOI (ROYAL CORNWALL HOSPITALS NHS TRUST), Royal Cornwall Hospitals NHS Trust

1 Attachment

The RCHT are always looking to improve the service that we provide and
would welcome any feedback that you wish to give about your experience
dealing with FOI.  Please take a few moments to complete an anonymous
survey so that we can take into consideration your comments: 
[1]https://www.surveymonkey.com/r/Y7T2N78

 

Dear Ms Moody

 

FREEDOM OF INFORMATION ACT 2000 - INFORMATION REQUEST Ref: 8075

Your request for an Internal review has now been considered and
the response is attached.

 

If you have any queries or concerns then please do not hesitate to contact
me (please remember to quote the reference number above in any future
communications).

If you are unhappy with the service you have received in relation to your
request and wish to make a complaint or request a review of our decision,
you should write to the Information Governance Manager, Kedhlow Building,
Royal Cornwall Hospital, Truro, Cornwall, TR1 3LJ or
e-mail [2][Royal Cornwall Hospitals NHS Trust request email]

If you are not content with the outcome of your complaint or review, you
may apply directly to the Information Commissioner for a decision.
Generally, the ICO cannot make a decision unless you have exhausted the
complaints procedure provided by the Royal Cornwall Hospital.

 

The Information Commissioner can be contacted at:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Telephone: 0303 123 1113 or 01625 54 57 45

[3]www.ico.gov.uk

 

Yours sincerely

Jemma Dunstan 

 

 

 

show quoted sections