NHS hack warning issued to everyone in Dumfries and Galloway

NHS Dumfries and Galloway is telling everyone in the region to assume that some of their data is likely to have been published online following a major hack.

The health board is expected to send out leaflets from the chief executive describing the situation as “extremely serious".

A ransomware group targeted the health board in February. When its demands were not met it published stolen files online.

The health board is planning to contact patients classed as “high risk” individually and is asking everyone to remain on their guard for any attempts to access their computer systems.

It confirmed in May that the cyber-criminals had published some children’s mental health data.

More than 100,000 people live in Dumfries and Galloway.

The health board previously said that "hundreds if not thousands" of patients and staff may have been affected, but it is now feared that figure is far higher.

The leaflets will tell residents that the best approach is to assume that some data relating to them is likely to have been copied and published.

Published information includes X-rays, test results and letters between healthcare professionals.

NHS Dumfries and Galloway says its biggest concern is for vulnerable groups of people because if criminals have access to their information it may put them at higher risk.

The health board has continuously urged people to be alert for any attempts to access their work and personal data, or for approaches by anyone claiming to be in possession of either their personal data or NHS data - whether this approach comes by email, telephone, social media or some other means.

In all cases, people are advised to take down details about the approach and contact Police Scotland online.

South Scotland MSP Colin Smyth said everyone should be on their guard.

“It is clear that the scale of the leak and the number of people affected is significantly higher than was first envisaged," he said.

"It still remains unclear just exactly what has been leaked on each person, despite significant work by the NHS to work through millions of items."

He said the only "saving grace" was that the data did not appear to have been used against anyone so far.