Keeping us safe

The NHS was hit yesterday by a major cyber attack using ransomware: computer screens suddenly announced that data was unavailable unless the user paid a fee. In some trusts phones stopped working, too; patients were advised not to go to A & E. Holding the nation’s healthcare hostage in this way is an unconscionable criminal act. It is also a wake-up call to the British state. Our newfound reliance upon electronic communications leaves the country vulnerable to extortion.

Of course, it is important to keep pace with technological change, especially if it promises to save money and streamline record keeping. But putting so many eggs in one basket does incur risk – and there have been many warnings before now that the NHS is struggling to keep things in good order. Last month, Barts Health, England’s largest trust, had to cancel at least 136 operations and “hundreds” of chemotherapy sessions after its IT systems went down; it also suffered a ransomware attack in January. It is feared that some trusts are probably using outdated software that might be more exposed to attack.

This is why patients have often expressed nervousness about the reliance upon NHS databases, particularly the notion of a national one. No matter how many assurances are made to the public that such arrangements are airtight, the criminals always seem to find a way to get in. The solution is obviously to tighten security. Equally it is imperative that users take care – a system is only as strong as its most fallible point. Either way, it is now up to the security services to act and act fast. Cyber crime – which has previously hit companies such as Talktalk – costs the economy billions and puts lives at risk. The Government has to get on top of it.