A leading cybersecurity expert has issued a warning about the vulnerability of the NHS to cyber-attacks unless its computer systems are updated. Prof Ciaran Martin, the founding CEO of the UK’s National Cyber Security Centre (NCSC), expressed his concerns following a major ransomware attack that disrupted healthcare services in London.
NHS England has invested £338m in the past seven years to address cybersecurity issues, but Prof Martin believes more urgent action is needed. A recent British Medical Association report highlighted the NHS’s outdated IT infrastructure, leading to significant time wastage for doctors.
The recent cyber-attack targeted Synnovis, a pathology testing organization, affecting several hospitals in London. The Russian-based hacking group Qilin demanded a £40m ransom, highlighting the growing trend of Russian cyber criminals targeting global healthcare systems.
Prof Martin emphasized the need for NHS cybersecurity to address outdated systems, identify vulnerable points, and implement basic security practices. He stressed the importance of better backups and improving security measures to deter attackers.
Front-line staff expressed concerns about outdated equipment and the lack of action to address cybersecurity issues. Dr. Daniel Gardham from the Surrey Centre for Cyber Security echoed Prof Martin’s concerns about unpatched vulnerabilities in old computers.
NHS England assured that they are increasing cyber resilience and investing in cybersecurity measures to protect health and care organizations. If you have any information for BBC London’s investigations team, you can contact them at londoninvestigationsteam@bbc.co.uk.