Hackers cripple NHS hospital machines to demand ransom cash: Four trusts so far hit by attacks as criminals target out-of-date computers

  • Old hospital computers make it simple for hackers to install malicious software which freezes entire IT system
  • Radiotherapy machines, MRI scanners and other diagnostic equipment can be rendered useless until ransom is paid to unlock software
  • Northern Lincolnshire and Goole NHS Foundation Trust was hit last month 

By Ben Spencer for the Daily Mail

Published: 17:01 EST, 10 November 2016 | Updated: 08:36 EST, 11 November 2016

Hackers are targeting vital hospital machines in a bid to extract thousands of pounds in ransom money, experts warn.

At least four NHS trusts have been targeted in the so-called 'ransomware' attacks this year.

A major cyber-security firm yesterday claimed out-of-date hospital computers make it simple for hackers to install malicious software which freezes the entire IT system – including medical machines connected to it. 

Hackers are targeting hospital machines in a bid to extract ransom money, experts warn. All non-urgent operations and appointments were cancelled at Northern Lincolnshire and Goole NHS Foundation Trust (above) for two days last month after a virus infected the IT system

Radiotherapy machines, MRI scanners and other diagnostic equipment can be rendered useless until hospitals pay for a password to unlock the software.

All non-urgent operations and appointments were cancelled at Northern Lincolnshire and Goole NHS Foundation Trust for two days last month, after a malicious virus infected the IT system. 

No cash was paid in that incident, but a report by Intel Security revealed further attacks in February, in which two unnamed British hospital trusts were infected with 'ransomware' in the same way.

A fourth attack, at the Papworth heart hospital in Cambridge, was dodged only because the lucky timing of its daily backup meant computers could simply be rebooted.

Gordon Morrison, director of government relations at Intel Security, warned that many NHS hospitals use 'antiquated' computer equipment which does not have the latest security software.

An attack at the Papworth heart hospital in Cambridge was dodged only because the lucky timing of its daily backup meant computers could simply be rebooted

Speaking at the King's Fund Annual Conference in London yesterday, he said: 'Criminals recognise that MRI machines, oncology departments, machines that are providing medical services, medical analytics, are all linked to legacy [outdated] devices. 

'They will know that and they will exploit that. If there is money to be made by crippling a machine, they will do that.'

While it is not thought NHS trusts have paid out ransoms, Mr Morrison cited the case of a hospital in California, which was forced to close for more than five days earlier this year before giving hackers $17,000 (£13,600). 

He said a total of 19 hospitals around the world were hit in the first half of this year.

Hackers typically attack by including a virus in a spam email. If a hospital staff member clicks a link or opens an attachment, the virus can lock down the entire IT system.

Mr Morrison said: 'This is malware that infects you, encrypts as much information as it can, and then demands a bitcoin [anonymous digital payment] or many bitcoins to free it. A California hospital was hit in this way earlier this year ... the reputational damage was catastrophic.'

He said one hacker had made the equivalent of £80,000 targeting several hospitals.

A spokesman for health information service NHS Digital said: 'Like all organisations the NHS is subject to malicious attacks on its systems and, like all organisations, these attempted attacks are rising. But we are taking action to ensure information is as safe as possible.'

Comments (206)

Share what you think

 View all

The comments below have not been moderated.

 View all

The views expressed in the contents above are those of our users and do not necessarily reflect the views of MailOnline.

Add your comment

By posting your comment you agree to our house rules.

Who is this week's top commenter? Find out now