Further information on ransomware

The request was successful.

Dear Hull and East Yorkshire Hospitals NHS Trust,

Hi,

You have been sent this FOI request as you have previously indicated that your organisation was the victim of a ransomware attack.

We’re now looking to further investigate these attacks and would appreciate any additional information you can give us.

Many thanks

Do you know the source device of the original infection?
• Yes
• No

If yes, did the ransomware attack originate from a:
• Networked NHS device
• Patient device
• Visitor device

Do you know how the ransomware attacker gained access to your organisation’s network?
• Phishing via email or social media network
• Drive-by-download caused by clicking on a compromised website
• Infection via a computer that was part of a botnet
• Other (please specify)

How far did the most successful ransomware attack get when targeting your organisation’s data?
• The attacker was unable to successfully encrypt any files/data
• The attacker was able to encrypt some files/data

What type of data has been affected by ransomware attackers in the past 12 months in your organisation?
• Employee information
• Patient information
• Payroll/HR
• Financial data
• All data was targeted

Has your organisation been able to identify the attacker in any of the ransomware attacks on your organisation, and if so who was the attacker?
• Organised cyber-criminals
• Opportunistic hackers (non-organised)
• Political hacktivists
• Disgruntled employees/former employees
• State sponsored hackers
• Other (please specify)

Yours faithfully,

Kelly Friend

HEY-FOI (HUMBER NHS FOUNDATION TRUST), Hull University Teaching Hospitals NHS Trust

Dear  Requestor

Thank you for your request for information. It will be dealt with under
the terms of the Freedom of Information Act 2000.  In some circumstances a
fee may be payable and if that is the case, we will let you know. A fees
notice will be issued, which you will be required to pay before we proceed
with your request.

We will respond to your request within 20 working days of it being
received.

All information provided under Freedom of Information is deemed to be in
the public domain. The Information Commissioner requires as good practice
that organisations make public, information provided from Freedom of
Information requests.

Any information we provide following your request under the Freedom of
Information Act will not confer an automatic right for you to re-use that
information, for example to publish it. If you wish to re-use the
information we provide and you do not specify this in your initial
application for information then you must make a further request for its
re-use as per the Re-Use of Public Sector Information Regulations 2005
[1]www.opsi.gov.uk . This will not affect your initial information
request.

Kind Regards

Freedom Of Information Team

for Hull & East Yorkshire Hospitals Trust

Mary Seacole Building, Willerby Hill,Willerby, HU10 6ED
Fax: 01482 477857

 

This e-mail and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to which they are
addressed.  If you are not the intended recipient you are notified that
any use, disclosure, copying or distribution of the information is
prohibited.  In such cases you should destroy this message and kindly
notify the sender by reply e-mail.  All e-mails will be scanned by the
Trust for viruses, spam and malicious content.  However, Humber NHS
Foundation Trust will not be liable for any losses as a result of any
virus contained within this email or attachment(s).  We are not liable for
any opinions expressed by the sender where this is a non-business e-mail. 
If you do not receive the entire message, or if you have difficulty with
the transmission, please telephone us immediately.

 

 

 

show quoted sections

References

Visible links
1. blocked::http://www.opsi.gov.uk/
http://www.opsi.gov.uk/

HEY-FOI (HUMBER NHS FOUNDATION TRUST), Hull University Teaching Hospitals NHS Trust

1 Attachment

Dear Kelly

Please find attached the response to your Freedom of Information Request.

The information we have provided to you is copyrighted to the Hull & East Yorkshire Hospitals NHS Trust and provided to you free of charge for your personal use or for other specific uses permitted in the Copyright Act. If however you wish to use the information we have provided for any commercial purposes including the sale of the information to a third party then, under the Regulations on the Re-use of Public Sector Information Regulations 2005, you must ask us for permission to do so in respect of each specific piece of such information. If we do grant such permission this may involve a licensing arrangement which may attract a fee.

All information provided under Freedom of Information is deemed to be in the public domain. The Information Commissioner requires as good practice that organisations make public, information provided from Freedom of Information requests.
If you are unhappy with the service you have received in relation to your request and wish to make a complaint or request a review of our decision you should write to:

Freedom of Information Team
On behalf of Hull & East Yorkshire Hospitals NHS Trust
Mary Seacole Building
Willerby Hill
Willerby
HU10 6ED
FAX: 01482 477857
[Hull and East Yorkshire Hospitals NHS Trust request email] or [email address]

If you are not content with the outcome of your complaint, you may apply directly to the Information Commissioner for a decision. Generally, the ICO cannot make a decision unless you have exhausted the complaints procedure provided by the Hull & East Yorkshire NHS Trust. The Information Commissioner can be contacted at:

The Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Yours sincerely

Freedom of Information Team
On behalf of Hull & East Yorkshire Hospitals NHS Trust
Mary Seacole Building
Willerby Hill
Willerby
HU10 6ED

This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to which they are addressed. If you are not the intended recipient you are notified that any use, disclosure, copying or distribution of the information is prohibited. In such cases you should destroy this message and kindly notify the sender by reply e-mail. All e-mails will be scanned by the Trust for viruses, spam and malicious content. However, Humber NHS Foundation Trust will not be liable for any losses as a result of any virus contained within this email or attachment(s). We are not liable for any opinions expressed by the sender where this is a non-business e-mail. If you do not receive the entire message, or if you have difficulty with the transmission, please telephone us immediately.

show quoted sections