NHS Dumfries and Galloway has cautioned over 100,000 patients to operate under the assumption that their personal data may have been stolen and exposed online following a significant cyber attack earlier this year.
Chief Executive Julie White has taken steps to inform every household in the area about the March 2024 cyber attack and provide guidance on how to stay safe online.
A ransomware group targeted the health board and made patient data available on the dark web when their demands were not met.
In response, NHSDG has distributed a leaflet to households in the region containing a letter from Julie White, a simplified version of the letter, and an FAQ section.
White emphasized the need for vigilance, stating, “This is an extremely serious situation, and everyone is asked to be on their guard for any attempts to access their computer systems or any approaches by those claiming to have their data.”
The leaflet outlines the types of data that may have been exposed, including x-rays, test results, and communications between health teams and patients.
NHSDG has identified potential risks from the data breach, such as identity theft and extortion, and is actively investigating the matter.
White concluded by apologizing for any anxiety caused and directing individuals to visit www.nhsdg.co.uk/cyberattack for more information.
For further assistance, a helpline can be reached at 01387 216 777 during specified hours.
This incident follows a ransomware attack on pathology service provider Synnovis, which impacted several NHS trusts and resulted in the rescheduling of hundreds of operations and appointments.
