DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

More details emerge on NHS Lanarkshire ransomware attack

Posted on August 29, 2017 by Dissent

The cyber attack that led to operations and appointments being cancelled at NHS Lanarkshire was another “ransomware” case, Neil Pooran reports:

The malicious software has been identified as a programme called Bitpaymer, a new type of ransomware which was able to get past existing security measures.

Bitpaymer locks away files and demands payments in Bitcoins, an online currency, to unlock them.

It also threatens to release files if the payment is not received but NHS Lanarkshire said it had no reports this had happened.

Read more on STV News.

Category: Health DataMalwareNon-U.S.

Post navigation

← Tax documents with personal info found in East Naples dumpster
Personal info, Social Security numbers for lacrosse players posted on MLL website →

3 thoughts on “More details emerge on NHS Lanarkshire ransomware attack”

  1. eca says:
    August 29, 2017 at 3:17 pm

    Its funny..
    I wonder if this is a Ploy by Some of these companies to delete/Cover/get rid of OLD data and have a reason NOT to have tax documents/UPGRADE systems that need more Room, Hard drives, data storage….

    There is to much happening. And any GOOD server company/software creater should be ahead of the task..

    BEFORE this point i would have been slapping fingers with a 3′ ruler..

    1. Dissent says:
      August 29, 2017 at 3:28 pm

      This is the NHS we’re talking about. Study their history of data security and breaches. They are one of the reasons God gave us #SMH and #facepalm. But if the ransomware was a new variant, then, well….. except: how did it get into the system?

      1. ECA says:
        August 30, 2017 at 1:19 am

        tHATS IT..
        Basic protection and keeping the MAIL SERVER separate..
        Some how an Injection/INPUT of the program HAD to be done..
        USB, Floppy, Keyboard, and all that OR MAIL..

        And that Still comes back to BASIC security. EVEN from remote, from a Client reading DATA and adding DATA, there SHOULD have been SOME TYPE of protection..
        Even if it just VALIDATED that the DATA was DATA, not exe/bat/msi files..
        ANd if this is a LARGE format server…Lots of storage…IT WILL TAKE TIME to do the process.
        All of a sudden, ALL your HD start Running NUTS..??

        Thats the concern..Validating data is VERY BASIC and easy to do..
        Still want to know the OS these companies are running..

Comments are closed.

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Copilot AI Bug Could Leak Sensitive Data via Email Prompts
  • FTC Provides Guidance on Updated Safeguards Rule
  • Sentara Health terminates remote employees after realizing they couldn’t be sure who was doing the work.
  • Hackers Break Into Car Sharing App, 8.4 Million Users Affected
  • Cyberattack pushes German napkin company into insolvency
  • WMATA Train Operators Arrested in Health Care Fraud Scheme
  • Washington Post investigating cyberattack on journalists, WSJ reports
  • Resource: State Data Breach Notification Laws – June 2025
  • WestJet investigates cyberattack disrupting internal systems
  • Plastic surgeons often store nude photos of patients with their identity information. When would we call that “negligent?”

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Vermont signs Kids Code into law, faces legal challenges
  • Data Categories and Surveillance Pricing: Ferguson’s Nuanced Approach to Privacy Innovation
  • Anne Wojcicki Wins Bidding for 23andMe
  • Would you — or wouldn’t you?
  • New York passes a bill to prevent AI-fueled disasters
  • Synthetic Data and the Illusion of Privacy: Legal Risks of Using De-Identified AI Training Sets
  • States sue to block the sale of genetic data collected by DNA testing company 23andMe

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.