This article is from the source 'guardian' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.
You can find the current article at its original source at https://www.theguardian.com/society/live/2017/may/12/england-hospitals-cyber-attack-nhs-live-updates
The article has changed 42 times. There is an RSS feed of changes available.
Previous version
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
Next version
Version 27 | Version 28 |
---|---|
Ransomware cyber-attack hits 99 countries with UK hospitals among targets – live | Ransomware cyber-attack hits 99 countries with UK hospitals among targets – live |
(35 minutes later) | |
12.01pm BST | |
12:01 | |
Labour leader Jeremy Corbyn has also responded to the attack: | |
What we’ve now got is a bunch of 21st Century highway robbers that have hacked into our NHS and are basically offering protection money to get the information back in order to treat cancer patients or anybody else. It’s unbelievably disgusting and I’ve got nothing but contempt for those people that have done it, and I’m sure all of you would share that. | |
But I’m also very angry that in 2014, there was a one-year renewal of the protection system on the NHS systems which was not renewed after that and not renewed the year after that and so are systems are now not upgraded and not protected. As a result, we’ve got this dreadful situation that NHS workers are facing today. | |
And so we obviously support our NHS workers but I tell you this, a Labour government would not leave our NHS’s very vital information systems unprotected. We would protect them.” | |
11.55am BST | 11.55am BST |
11:55 | 11:55 |
Labour said there have been repeated warnings about the vulnerability of the outdated NHS systems, including from the National Cyber Security Centre and the National Crime Agency. | Labour said there have been repeated warnings about the vulnerability of the outdated NHS systems, including from the National Cyber Security Centre and the National Crime Agency. |
Many had been left “extremely vulnerable” to an attack since 2015, when they continued to use an outdated version of Windows after a security package had been stopped, Jon Ashworth said. | Many had been left “extremely vulnerable” to an attack since 2015, when they continued to use an outdated version of Windows after a security package had been stopped, Jon Ashworth said. |
“NHS Trusts have been running thousands of outdated and unsupported Windows XP machines despite the Government ending its annual £5.5m deal with Microsoft, which provided ongoing security support for Windows XP, in May 2015,” the shadow health secretary wrote in his letter to Jeremy Hunt. | “NHS Trusts have been running thousands of outdated and unsupported Windows XP machines despite the Government ending its annual £5.5m deal with Microsoft, which provided ongoing security support for Windows XP, in May 2015,” the shadow health secretary wrote in his letter to Jeremy Hunt. |
“It effectively means that unless individual trusts were willing to pay Microsoft for an extended support deal, since May 2015 their operating systems have been extremely vulnerable to being hacked.” | “It effectively means that unless individual trusts were willing to pay Microsoft for an extended support deal, since May 2015 their operating systems have been extremely vulnerable to being hacked.” |
A freedom of information request in February found that 79 English NHS trusts had suffered ransomware attacks since June 2015, Ashworth said. | A freedom of information request in February found that 79 English NHS trusts had suffered ransomware attacks since June 2015, Ashworth said. |
11.48am BST | 11.48am BST |
11:48 | 11:48 |
Labour accuses Hunt over NHS attack | Labour accuses Hunt over NHS attack |
Labour has accused Jeremy Hunt of ignoring “extensive warning signs” before the unprecedented cyber attack that has plunged the NHS into chaos. | Labour has accused Jeremy Hunt of ignoring “extensive warning signs” before the unprecedented cyber attack that has plunged the NHS into chaos. |
Shadow health secretary Jonathan Ashworth said concerns were repeatedly flagged about the NHS’s outdated computer systems, which left it vulnerable to the virus. | Shadow health secretary Jonathan Ashworth said concerns were repeatedly flagged about the NHS’s outdated computer systems, which left it vulnerable to the virus. |
In a letter to Hunt on Saturday he wrote: “As Secretary of State, I urge you to publically outline the immediate steps you’ll be taking to significantly improve cyber security in our NHS. The public has a right to know exactly what the Government will do to ensure that such an attack is never repeated again.” | In a letter to Hunt on Saturday he wrote: “As Secretary of State, I urge you to publically outline the immediate steps you’ll be taking to significantly improve cyber security in our NHS. The public has a right to know exactly what the Government will do to ensure that such an attack is never repeated again.” |
11.42am BST | 11.42am BST |
11:42 | 11:42 |
Nissan's Sunderland plant affected | Nissan's Sunderland plant affected |
The huge Sunderland car factory owned by Nissan has been struck by the cyber attack, halting production at 5pm on Friday. | The huge Sunderland car factory owned by Nissan has been struck by the cyber attack, halting production at 5pm on Friday. |
A Nissan spokesman told Newcastle’s ChronicleLive: “Like many organisations, our UK plant was subject to a ransomware attack affecting some of our systems on Friday evening. Our teams are working to resolve the issue.” | A Nissan spokesman told Newcastle’s ChronicleLive: “Like many organisations, our UK plant was subject to a ransomware attack affecting some of our systems on Friday evening. Our teams are working to resolve the issue.” |
Updated | Updated |
at 11.44am BST | at 11.44am BST |
11.37am BST | 11.37am BST |
11:37 | 11:37 |
It’s worth remembering that back in February 2016 a Californian hospital paid $17,000 in bitcoin after hackers installed a virus on its computer systems that encrypted their computer files. | It’s worth remembering that back in February 2016 a Californian hospital paid $17,000 in bitcoin after hackers installed a virus on its computer systems that encrypted their computer files. |
Hollywood Presbyterian Medical Center lost access to its computer systems on 5 February. Almost two weeks later the hospital said it had paid up to regain access to its data. | Hollywood Presbyterian Medical Center lost access to its computer systems on 5 February. Almost two weeks later the hospital said it had paid up to regain access to its data. |
The move was one of the most high-profile examples of a hacking victim paying the fee for so-called ransomware. | The move was one of the most high-profile examples of a hacking victim paying the fee for so-called ransomware. |
11.23am BST | 11.23am BST |
11:23 | 11:23 |
BBC technology correspondent Rory Cellan-Jones tweets: | BBC technology correspondent Rory Cellan-Jones tweets: |
Love the fact that the hero who stopped the ransomware spreading regards it as almost accidental! https://t.co/fqlnhBXYTq | Love the fact that the hero who stopped the ransomware spreading regards it as almost accidental! https://t.co/fqlnhBXYTq |
I will confess that I was unaware registering the domain would stop the malware until after i registered it, so initially it was accidental. | I will confess that I was unaware registering the domain would stop the malware until after i registered it, so initially it was accidental. |
Updated | Updated |
at 11.24am BST | at 11.24am BST |
11.11am BST | 11.11am BST |
11:11 | 11:11 |
French carmaker Renault is the first French firm to be hit by the global cyberattack, management said on Saturday. | French carmaker Renault is the first French firm to be hit by the global cyberattack, management said on Saturday. |
“Work is going on since last night. We are doing what is needed to counter this attack,” a spokesperson said. | “Work is going on since last night. We are doing what is needed to counter this attack,” a spokesperson said. |
“The problems were mainly related to France, where some of Renault’s factories also faced a malfunctioning of certain parts of its information system,” she added. | “The problems were mainly related to France, where some of Renault’s factories also faced a malfunctioning of certain parts of its information system,” she added. |
The attack has also halted production at Renault’s Revoz subsidiary in Slovenia after computer systems were hit. | The attack has also halted production at Renault’s Revoz subsidiary in Slovenia after computer systems were hit. |
Updated | Updated |
at 11.22am BST | at 11.22am BST |
11.03am BST | 11.03am BST |
11:03 | 11:03 |
The Guardian’s Samuel Gibbs reported in May 2015 that the Government Digital Service had decided not to continue its £5.5m deal with Microsoft to extend support for Windows XP. That decision left government computers still running on the obsolete operating system at risk from hackers and may be one reason why some NHS trusts fell victim to the attack on Friday. | The Guardian’s Samuel Gibbs reported in May 2015 that the Government Digital Service had decided not to continue its £5.5m deal with Microsoft to extend support for Windows XP. That decision left government computers still running on the obsolete operating system at risk from hackers and may be one reason why some NHS trusts fell victim to the attack on Friday. |
The service said ending the support meant “weaknesses that are found in unsupported products will remain unpatched and will be exploitable by relatively low-skilled attackers”. | The service said ending the support meant “weaknesses that are found in unsupported products will remain unpatched and will be exploitable by relatively low-skilled attackers”. |
Microsoft withdrew its extended support programme for Windows XP, its 14-year-old operating system, in April 2014. Given the number of Windows XP PCs still being used in government and businesses at the time, Microsoft provided paid-for extended support on a one-off basis. | Microsoft withdrew its extended support programme for Windows XP, its 14-year-old operating system, in April 2014. Given the number of Windows XP PCs still being used in government and businesses at the time, Microsoft provided paid-for extended support on a one-off basis. |
Updated | Updated |
at 11.04am BST | at 11.04am BST |
10.51am BST | 10.51am BST |
10:51 | 10:51 |
The threat posed by the cyber-attack has receded for the time being, partly because a UK-based cyber security researcher registered a domain that he noticed the malware was trying to connect to, limiting its spread. | The threat posed by the cyber-attack has receded for the time being, partly because a UK-based cyber security researcher registered a domain that he noticed the malware was trying to connect to, limiting its spread. |
“We are on a downward slope, the infections are extremely few, because the malware is not able to connect to the registered domain,” said Vikram Thakur, principal research manager at Symantec. “The numbers are extremely low and coming down fast.” | “We are on a downward slope, the infections are extremely few, because the malware is not able to connect to the registered domain,” said Vikram Thakur, principal research manager at Symantec. “The numbers are extremely low and coming down fast.” |
But the attackers could yet tweak the code and start the new cycle. The British-based researcher, whose Twitter handle is @MalwareTechBlog, said he had not seen any such tweaks yet, “but they will”. | But the attackers could yet tweak the code and start the new cycle. The British-based researcher, whose Twitter handle is @MalwareTechBlog, said he had not seen any such tweaks yet, “but they will”. |
Updated | Updated |
at 11.23am BST | at 11.23am BST |
10.36am BST | 10.36am BST |
10:36 | 10:36 |
Russia’s central bank says it had detected “massive” cyber-attacks on domestic banks, which successfully defended them, the RIA news agency reports. | Russia’s central bank says it had detected “massive” cyber-attacks on domestic banks, which successfully defended them, the RIA news agency reports. |
Russian media said that state-owned Russian Railways also successfully defended itself from a cyber-attack. | Russian media said that state-owned Russian Railways also successfully defended itself from a cyber-attack. |
Updated | Updated |
at 11.24am BST | at 11.24am BST |
10.27am BST | 10.27am BST |
10:27 | 10:27 |
Cobra meeting called | Cobra meeting called |
The home secretary, Amber Rudd, will chair a Cobra meeting in Whitehall at 2.30pm. | The home secretary, Amber Rudd, will chair a Cobra meeting in Whitehall at 2.30pm. |
Updated | Updated |
at 11.24am BST | at 11.24am BST |
10.22am BST | 10.22am BST |
10:22 | 10:22 |
The cyber-attack has affected some hospitals, schools and universities in Asia, but the extent of any damage remains unclear. | The cyber-attack has affected some hospitals, schools and universities in Asia, but the extent of any damage remains unclear. |
China’s official news agency, Xinhua, said secondary schools and universities were hit but did not say how many. Sun Yat-sen university said it received a large number of virus complaints on Friday, financial magazine Caixin reported. | China’s official news agency, Xinhua, said secondary schools and universities were hit but did not say how many. Sun Yat-sen university said it received a large number of virus complaints on Friday, financial magazine Caixin reported. |
William Saito, cyber security adviser to the Japanese cabinet government, said some institutions were affected but did not elaborate. | William Saito, cyber security adviser to the Japanese cabinet government, said some institutions were affected but did not elaborate. |
South Korea’s Yonhap news agency said a university hospital in Seoul had been hit as well. Two hospitals in Jakarta were hit, according to an Indonesian official. | South Korea’s Yonhap news agency said a university hospital in Seoul had been hit as well. Two hospitals in Jakarta were hit, according to an Indonesian official. |
Updated | Updated |
at 11.25am BST | at 11.25am BST |
9.30am BST | 9.30am BST |
09:30 | 09:30 |
Amber Rudd admits there is chance not all NHS files are backed up | Amber Rudd admits there is chance not all NHS files are backed up |
Amber Rudd told BBC Breakfast she could not confirm that all NHS files are backed up. She said: | Amber Rudd told BBC Breakfast she could not confirm that all NHS files are backed up. She said: |
I hope the answer is yes, that is the instructions that everybody has received in the past. That is good cyber-defence, but I expect, and we will find out over the next few days if there are any holes in that. | I hope the answer is yes, that is the instructions that everybody has received in the past. That is good cyber-defence, but I expect, and we will find out over the next few days if there are any holes in that. |
There may be lessons to learn from this but the most important thing now is to disrupt the attack, let’s come back to afterwards whether there are lessons to be learned. | There may be lessons to learn from this but the most important thing now is to disrupt the attack, let’s come back to afterwards whether there are lessons to be learned. |
Rudd later told Sky News: “It is disappointing that they [the NHS] have been running Windows XP - I know that the secretary of state for health has instructed them not to and most have moved off it.” | Rudd later told Sky News: “It is disappointing that they [the NHS] have been running Windows XP - I know that the secretary of state for health has instructed them not to and most have moved off it.” |
She added: “Where the patient data has been properly backed up, which has been in most cases, work can continue as normal because the patient data can be downloaded and people can continue with their work.” | She added: “Where the patient data has been properly backed up, which has been in most cases, work can continue as normal because the patient data can be downloaded and people can continue with their work.” |
Now, if only someone could find that extra £350 million a week they promised for the NHS... | Now, if only someone could find that extra £350 million a week they promised for the NHS... |
Updated | Updated |
at 11.26am BST | at 11.26am BST |
9.23am BST | 9.23am BST |
09:23 | 09:23 |
G7 finance ministers turned their focus today to combating cybercrime in what Italy’s Pier Carlo Padoan described as an “unfortunately very timely” discussion, AFP reports. | G7 finance ministers turned their focus today to combating cybercrime in what Italy’s Pier Carlo Padoan described as an “unfortunately very timely” discussion, AFP reports. |
The ministers from the group of seven wealthy democracies will say that cyber incidents represent a growing threat to their economies and that tackling them should be a priority, Italian officials said. | The ministers from the group of seven wealthy democracies will say that cyber incidents represent a growing threat to their economies and that tackling them should be a priority, Italian officials said. |
The talks, scheduled before Friday’s events, focused particularly on the potential threat to the global financial system in the event of hackers being able to infiltrate the computer systems that run the global banking system, capital and equity markets. | The talks, scheduled before Friday’s events, focused particularly on the potential threat to the global financial system in the event of hackers being able to infiltrate the computer systems that run the global banking system, capital and equity markets. |
The ministers, who also discussed inequality, and transnational tax evasion during their two-day review of the world economy, were due to wrap up their talks at lunchtime. | The ministers, who also discussed inequality, and transnational tax evasion during their two-day review of the world economy, were due to wrap up their talks at lunchtime. |
“We are agreed on many things ... including on the fight against cybercrime which is unfortunately very timely,” Padoan said on his arrival for Sunday’s closing session. | “We are agreed on many things ... including on the fight against cybercrime which is unfortunately very timely,” Padoan said on his arrival for Sunday’s closing session. |
Updated | Updated |
at 11.27am BST | at 11.27am BST |
9.18am BST | 9.18am BST |
09:18 | 09:18 |
The UK National Cyber Security Centre is sharing advice on how to prevent a ransomware hack and what to do if you’ve been targeted. | The UK National Cyber Security Centre is sharing advice on how to prevent a ransomware hack and what to do if you’ve been targeted. |
How to prevent a ransomware incident and what to do if your organisation is infected https://t.co/YSmFYATtAK pic.twitter.com/NhdC5fIWWG | How to prevent a ransomware incident and what to do if your organisation is infected https://t.co/YSmFYATtAK pic.twitter.com/NhdC5fIWWG |
9.09am BST | 9.09am BST |
09:09 | 09:09 |
The Scottish government has said it is working closely with health officials following the hack of 11 of Scotland’s 14 NHS health boards. | The Scottish government has said it is working closely with health officials following the hack of 11 of Scotland’s 14 NHS health boards. |
The Scottish health secretary, Shona Robison, who chaired a Scottish government resilience meeting earlier this morning, said work to fix the systems had entered a “recovery phase”. She told the BBC’s Good Morning Scotland programme: | The Scottish health secretary, Shona Robison, who chaired a Scottish government resilience meeting earlier this morning, said work to fix the systems had entered a “recovery phase”. She told the BBC’s Good Morning Scotland programme: |
People are working very, very hard and have worked through the night. The update I’ve got this morning is that we’re very much into recovery phase now, with a lot of work going on to get systems back up running. | People are working very, very hard and have worked through the night. The update I’ve got this morning is that we’re very much into recovery phase now, with a lot of work going on to get systems back up running. |
The GP systems, which of course were the main problem across our health boards - work is going on, and there is a level of confidence that many will be back up and running before GP surgeries open on Monday morning. | The GP systems, which of course were the main problem across our health boards - work is going on, and there is a level of confidence that many will be back up and running before GP surgeries open on Monday morning. |
Robison added that there has been no detection of breach to patient confidentiality “so patients should be reassured by that”. | Robison added that there has been no detection of breach to patient confidentiality “so patients should be reassured by that”. |
Updated | Updated |
at 11.27am BST | at 11.27am BST |
8.58am BST | 8.58am BST |
08:58 | 08:58 |
NHS trusts unaffected by the hack are taking precautionary measures. | NHS trusts unaffected by the hack are taking precautionary measures. |
We have not been affected by the #nhscyberattack but have switched off inbound external emails for precaution and will review on Monday. | We have not been affected by the #nhscyberattack but have switched off inbound external emails for precaution and will review on Monday. |
8.46am BST | 8.46am BST |
08:46 | 08:46 |
Here’s some more from the home secretary’s media round this morning, in which she’s giving very few details about the investigation into the attack. | Here’s some more from the home secretary’s media round this morning, in which she’s giving very few details about the investigation into the attack. |
Rudd said the attack “feels random in terms of where it’s gone to and where it’s been opened”, but said the authorities did not yet know where it had originated. | Rudd said the attack “feels random in terms of where it’s gone to and where it’s been opened”, but said the authorities did not yet know where it had originated. |
She added: “Windows XP is not a good platform for keeping your data as secure as the modern ones, because you can’t download the effective patches and anti-virus software for defending against viruses. | She added: “Windows XP is not a good platform for keeping your data as secure as the modern ones, because you can’t download the effective patches and anti-virus software for defending against viruses. |
“CQC (Care Quality Commission) does do cyber-checks on the NHS trusts, on hospitals when they do their visits, and they will be advising NHS trusts to move to modernise their platforms and I think that after this experience, I would expect them all to move forward with modernising.” | “CQC (Care Quality Commission) does do cyber-checks on the NHS trusts, on hospitals when they do their visits, and they will be advising NHS trusts to move to modernise their platforms and I think that after this experience, I would expect them all to move forward with modernising.” |
Rudd said the UK was a world leader in cyber security, adding: “So far, all we have seen is patients inconvenienced, some hospitals, some doctors making changes to their daily life. | Rudd said the UK was a world leader in cyber security, adding: “So far, all we have seen is patients inconvenienced, some hospitals, some doctors making changes to their daily life. |
“But the fact is no data has yet been accessed and the NHS are brilliantly managing to weave through this disruption.” | “But the fact is no data has yet been accessed and the NHS are brilliantly managing to weave through this disruption.” |
Updated | Updated |
at 11.29am BST | at 11.29am BST |