Police investigate after hack shuts NHS hospitals
Hospitals in Grimsby, Scunthorpe and Goole affected in last week's attack


West Yorkshire Police has launched a criminal investigation into an NHS hospital attack that resulted in a virus being injected into Northern Lincolnshire and Goole NHS Foundation Trust and United Lincolnshire Hospitals NHS Trust computer systems.
The attack originated in Northern Lincolnshire and Google NHS Foundation Trust's network, but because the computer systems are shared with United Lincolnshire Hospital, its computer systems were locked down immediately following the incident to prevent the spread of attack.
"We are aware of the incident and are investigating it as a crime. We are working closely with the NHS Foundation Trust as enquiries continue," DCI Vanessa Smith, of the regional cybercrime unit at West Yorkshire Police said.
The attack led to the cancellation of appointments, planned operations and diagnostic procedures at hospitals in Grimsby, Scunthorpe and Goole, causing major disruption in the area. However, emergency treatment was still available at the hospitals providing such services.
Following the incident last week, Dr Karen Dunderdale, deputy chief executive of the hospital said: "A virus infected our electronic systems on Sunday and we have taken the decision, following expert advice, to shut down the majority of our systems so we can isolate and destroy it.
"Our main priority is patient safety. A major incident has been called and all planned operations, outpatient appointments and diagnostic procedures have been cancelled for today and tomorrow (Monday and Tuesday)."
By midweek, the incident had been downgraded as IT experts managed to prevent the virus spreading any further. Dunderdale issued another statement, saying it was business as usual, three days after the attack was first discovered.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"Our systems are now almost fully operational so in terms of patient appointments it will be business as usual on Thursday and onwards with all appointments going ahead within all three of our hospitals and all our community services," she said.

Clare is the founder of Blue Cactus Digital, a digital marketing company that helps ethical and sustainability-focused businesses grow their customer base.
Prior to becoming a marketer, Clare was a journalist, working at a range of mobile device-focused outlets including Know Your Mobile before moving into freelance life.
As a freelance writer, she drew on her expertise in mobility to write features and guides for ITPro, as well as regularly writing news stories on a wide range of topics.
-
NHS supplier hit with £3m fine for security failings that led to attack
News Advanced Computer Software Group lacked MFA, comprehensive vulnerability scanning and proper patch management
By Emma Woollacott
-
Cyber attack delayed cancer treatment at NHS hospital
News A cyber attack at Wirral University Teaching Hospital in 2024 delayed critical cancer treatment for patients, documents show.
By Nicole Kobie
-
Alder Hey Children’s Hospital confirms hackers gained access to patient data through digital gateway service
News Europe’s busiest children’s hospital confirmed attackers were able to steal data from a compromised digital gateway service
By Solomon Klappholz
-
Major incident declared as Merseyside hospitals hit by cyber attack
News The incident, which has led to cancelled appointments, is just the latest in a series of attacks on healthcare organizations
By Emma Woollacott
-
Thousands of procedures canceled at London hospitals as Qilin releases blood test data
News The attack on blood testing company Synnovis continues to affect patients, while the ransomware group follows through with its threats
By Emma Woollacott
-
Ransomware group threatens to publish 3TB of stolen NHS Scotland data after posting proof of attack
News NHS Dumfries and Galloway has confirmed some of the sensitive data stolen during the 15 March attack has been published by a known ransomware operator
By Solomon Klappholz
-
Attack on third-party software vendor disrupts NHS ambulance services
News The ambulance services serve more than 10 million people across the south of England
By Ross Kelly
-
NHS data leak raises ‘serious questions’ about Manchester University cyber attack
News NHS patient data used for research purposes is believed to have been compromised in the June attack
By Ross Kelly