Security News > 2023 > July > Ambulance patient records system hauled offline for cyber-attack probe

Several UK NHS ambulance organizations have been struggling to record patient data and pass it to other providers following a cyber-attack aimed at health software company Ortivus.

In a statement, the Sweden-headquartered software vendor said it was subject to a cyber-attack on July 18 which hit UK customer systems within its hosted datacenter environment.

South Western Ambulance Service Trust and South Central Ambulance Service Trust moved to a hosted environment for Ortivus's MobiMed software following an agreement signed in 2020.

"Before the system can be brought into operation it has to be approved and verified by an independent actor to ensure that the system meets certain criteria indicated by NHS England and the Ambulance Trusts. This external analysis is ongoing and is expected to be finished at the beginning of next week," it said in a statement.

"Our focus now is just to restore the services and we're doing everything we can, with all our resources, to get the system up and running again. The discussion regarding compensation will be done later on," he said.

Speaking on behalf of the affected trusts, an NHS England spokesperson said: "We are aware of an incident affecting a small number of ambulance services. Our Cyber Security Operations Centre is working with affected organisations to investigate, alongside law enforcement colleagues, and supporting suppliers as they work to reconnect the system." .

News URL

https://go.theregister.com/feed/www.theregister.com/2023/07/26/uk_ambulance_services_cyber_attack/