Ransomware attacks

Kelly Friend made this Freedom of Information request to Barts Health NHS Trust

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was successful.

Dear Barts Health NHS Trust,

Do you have any end point or anti-virus software installed on your network devices?

Has your organisation ever been the victim of a ransomware attack which meant that an external hacker encrypted a PC or device or network within your organisation and demanded payment in order to decrypt the device? Y/N

If Yes

How often have you experienced an attack in the last 12 months?

How much did the attacker demand as a ransom for each attack?

How did you respond:
a) We paid the ransom
b) Threw away the device
c) Used decrypter or other technology to regain the use of the encrypted device
c) Other (Please describe)

Did you notify the police? Y/N

If yes

What was their advice?

Yours faithfully,

Kelly Friend

Dear Ms Friend,

Your Request for Information [FOI-403-16]

Thank you for your recent request for information.  This will be processed in accordance with the requirements of the Freedom of Information Act and you will receive a response within the stipulated timescale.

The FOI Act defines a number of exemptions which may prevent the release of the information you have requested.    We will assess the material and if any of the exemption categories apply, then the information may not be released.  We will tell you if that is so.  If the information you request refers to a third party then they may be consulted prior to a decision being taken on whether or not to release the information to you.     We will let you know if that is the case and give you an indication of the timescale for providing the information.   There may be a fee payable for the information you have requested.  The fee must be paid before the information is released.  We will inform you if this is the case.

Information that we may provide in response to the Freedom of Information Act request will be subject to copyright protection. You may ask if you can re-use the information, perhaps for commercial purposes.  Without the necessary permission you can breach our copyright.  To enquire about re-using Trust information, please write to us at the above address or e-mail [Barts Health NHS Trust request email] .

If you have any queries then please contact us at [Barts Health NHS Trust request email]

If you are dissatisfied on how your request has been handled, you can complain in writing to The Information Governance Manager, Barts Health NHS Trust:  E-mail [Barts Health NHS Trust request email]

Postal address:
The Information Governance Manager,
c/o Archives and Records Centre,
Barts Health NHS Trust,
Lower Ground Floor,
9 Prescot Street,
Aldgate, London E1 8PR
  
If, after  we have addressed your  complaint, you remain dissatisfied with how we have responded, you are entitled to appeal to the Information Commissioner (Tel: 01625 545 745).  Details are shown at www.ico.org.uk
    
Yours sincerely,

Laura Hynds

Corporate Records 
Barts Health NHS Trust 

show quoted sections

Dear Ms Friend,

Your Request for Information [FOI-403-16]

I am writing in response to your recent request for information relating to ransomware.

1. Do you have any end point or anti-virus software installed on your network devices?
Our response: Yes

2. Has your organisation ever been the victim of a ransomware attack which meant that an external hacker encrypted a PC or device or network within your organisation and demanded payment in order to decrypt the device?
Our response: Yes

3. How often have you experienced an attack in the last 12 months?
Our response: Once

4. How much did the attacker demand as a ransom for each attack?
Our response: Not known

5. How did you respond?
Our response: Other - by restoring encrypted files from backup.

6. Did you notify the police?
Our response: No

7. If yes, what was their advice?
Our response: Not applicable

I hope that this information will be of value to you.   However,  please let us know if you require any further information.  If you are dissatisfied on how your request has been handled, you can complain in writing to: The Information Governance Manager, Barts Health NHS Trust:   Email;  [Barts Health NHS Trust request email]

Postal address:  The Information Governance Manager 
                                 Barts Health NHS Trust,
                                 Lower Ground Floor
                                 9 Prescot Street,
                                 Aldgate,  
                                 London E1 8PR

If, after we have addressed your complaint, you remain dissatisfied with how we have responded,  you are entitled to appeal to the Information Commissioner  (Tel 01625 545 745)   details are shown at www.ico.org.uk

Yours sincerely,

Laura Hynds

Corporate Records  
Barts Health NHS Trust

show quoted sections