Further information on ransomware

Kelly Friend made this Freedom of Information request to University Hospitals of Derby and Burton NHS Foundation Trust

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was successful.

Dear Derby Hospitals NHS Foundation Trust,

Hi,

You have been sent this FOI request as you have previously indicated that your organisation was the victim of a ransomware attack.

We’re now looking to further investigate these attacks and would appreciate any additional information you can give us.

Many thanks

Do you know the source device of the original infection?
• Yes
• No

If yes, did the ransomware attack originate from a:
• Networked NHS device
• Patient device
• Visitor device

Do you know how the ransomware attacker gained access to your organisation’s network?
• Phishing via email or social media network
• Drive-by-download caused by clicking on a compromised website
• Infection via a computer that was part of a botnet
• Other (please specify)

How far did the most successful ransomware attack get when targeting your organisation’s data?
• The attacker was unable to successfully encrypt any files/data
• The attacker was able to encrypt some files/data

What type of data has been affected by ransomware attackers in the past 12 months in your organisation?
• Employee information
• Patient information
• Payroll/HR
• Financial data
• All data was targeted

Has your organisation been able to identify the attacker in any of the ransomware attacks on your organisation, and if so who was the attacker?
• Organised cyber-criminals
• Opportunistic hackers (non-organised)
• Political hacktivists
• Disgruntled employees/former employees
• State sponsored hackers
• Other (please specify)

Yours faithfully,

Kelly Friend

FOI (DERBY HOSPITALS), University Hospitals of Derby and Burton NHS Foundation Trust

Dear Ms Friend

Thank you for your request for information; this is now being processed in accordance with the Freedom of Information Act 2000.

This Trust will make every effort to provide a response within the 20 working days specified by the Act. You should receive your response by 20th October 2016

Your reference number relating to this application is FOI.16.469 Please ensure you quote this when contacting us.

Kind regards.

Jane Haywood
Freedom of Information Officer
Derby Teaching Hospital NHS Foundation Trust

show quoted sections

FOI (DERBY HOSPITALS), University Hospitals of Derby and Burton NHS Foundation Trust

1 Attachment

Dear Ms Friend

Further to your request under the Freedom of Information Act, please find our Trust’s response attached.

Kind regards

Jane Haywood
Freedom of Information Officer
Derby Teaching Hospitals NHS Foundation Trust

show quoted sections