Ransomware cyber attack information

Barry Salmon made this Freedom of Information request to Royal United Hospitals Bath NHS Foundation Trust

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was successful.

Dear Royal United Hospitals Bath NHS Foundation Trust,

Do you have any end point or anti-virus software installed on your network devices?

Has your organisation ever been the victim of a ransomware attack which meant that an external hacker encrypted a PC or device or network within your organisation and demanded payment in order to decrypt the device? Y/N

If Yes

How often have you experienced an attack in the last 12 months?

How much did the attacker demand as a ransom for each attack?

How did you respond:
a) We paid the ransom
b) Threw away the device
c) Used decrypter or other technology to regain the use of the encrypted device
c) Other (Please describe)

Did you notify the police? Y/N

If yes

What was their advice?

Yours faithfully,

Barry S

Clark Julie (ROYAL UNITED HOSPITALS BATH NHS FOUNDATION TRUST), Royal United Hospitals Bath NHS Foundation Trust

Dear Barry

 

Thank-you for your email received on 1st July 2016 requesting information
which has been processed under the Freedom of Information Act. Your
request has been considered in accordance with the requirements of this
Act. I can confirm that the Trust is holding records that are relevant to
your enquiry.

 

Request Response
Do you have any end point or anti-virus software installed on Yes
your network devices?

 
Has your organisation ever been the victim of a ransomware attack No
which meant that an external hacker encrypted a PC or device or
network within your organisation and demanded payment in order to
decrypt the device?  Y/N

 
If Yes N/A

 

How often have you experienced an attack in the last 12 months?

 

How much did the attacker demand as a ransom for each attack?

 

How did you respond:

a) We paid the ransom

b) Threw away the device

c) Used decrypter or other technology to regain the use of the
encrypted device

c) Other (Please describe)

 
Did you notify the police? Y/N N/A

 

 

I trust that this information provides you with a suitable response to
your enquiry. If not and you feel that your request has not been
satisfactorily answered, then the Trust has an internal review procedure
for dealing with complaints received under the Freedom of Information Act
2000 whereby your case is presented to the Chairman for an independent
review/decision.  Alternatively, you do have the right to complain to the
Information Commissioners Office after any internal review procedure has
been exhausted. The Information Commissioners Office is an independent
body that enforces the Freedom of Information Act, the Data Protection Act
and the Environmental Information regulations. The address of the
Information Commissioner is Information Commissioners Office, Wycliffe
House, Water Lane, Wilmslow,  Cheshire  SK9 5AF

If I can be of any further assistance, please do not hesitate to contact
me again.

 

 

 

 

 

Julie Clark

Freedom of Information Coordinator

Health Informatics Service

Apley House (E5)

Royal United Hospitals Bath NHS Foundation Trust
Combe Park, Bath, BA1 3NG

 

 

If you are sending any confidential or sensitive data an @nhs.net email
address must be used by both parties

 

Please consider joining us as a member of our NHS Foundation Trust:
[1]www.ruh.nhs.uk/foundationtrust

Visit our website at: [2]www.ruh.nhs.uk

 

show quoted sections

References

Visible links
1. http://www.ruh.nhs.uk/foundationtrust
2. http://www.ruh.nhs.uk/
http://www.ruh.nhs.uk/