Call us now:
One understands there’s a process to follow. One is not sure that the hackers behind Qilin and the attack that affected Synnovis UK, and the NHS across London. Are going to pay much attention to an interim injunction against ‘persons unknown’ seeking to prevent the release of the stolen data.
If companies like United Health or CDK cannot prevent their data from being released, once hacked and ransomed, Synnovis and the NHS stand little chance.
What we now understand is the the attack against Synnovis is that Qilin shared almost 400GB of data, including patient names, dates of birth, NHS numbers and descriptions of blood tests, on its darknet site and Telegram channel. The attack affected over 10,000 outpatient appointments and over 1,600 elective procedures. Synnovis had to rebuild over 60 IT systems are in the process of being rebuilt. A figure that demonstrates the severity of the attack against Synnovis and the likely processes Synnovis had in place to manage the response to a ransomware type attack.
The attack raises concerns over the governance of cybersecurity risk management by the NHS trusts involved in the hack, and the oversight of third party suppliers. In the case of Synnovis other companies in the group were hacked ahead of Synnovis in the UK. One questions why its taken so long for Synnovis to restore its service. Services that seem to have been a single point of failure for some NHS trusts in London.
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC NHS Synnovis
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7230122537202905088