DUBLIN (Reuters) -Ireland’s health service operator shut down all its IT systems on Friday to protect them from a “significant” ransomware attack, crippling diagnostic services, disrupting COVID-19 testing and forcing hospitals to cancel many appointments.
An international cyber crime gang was behind the attack, Ireland’s minister responsible for e-government Ossian Smyth said, describing it as possibly the most significant cyber crime attempt against the Irish state.
Ireland’s COVID-19 vaccination programme was not directly affected, but the attack was affecting IT systems serving all other local and national health provision, the head of the Health Service Executive (HSE) said.
Ransomware attacks typically involve the infection of computers with malicious software, often downloaded by clicking on seemingly innocuous links in emails or other website pop-ups. Users are left locked out of their systems, with the demand that a ransom be paid to restore computer functions.
“We are very clear we will not be paying any ransom,” Prime Minister Micheál Martin told reporters.
The HSE’s chief described the attack as “very sophisticated.” Officials said the gang exploited a previously unknown vulnerability, known as a ‘zero-day’ attack because the software maker has zero days’ notice to fix the hole.
Authorities shut down the system as a precaution after discovering the attack in the early hours of Friday morning and will seek to gradually reopen the network, although that will take “some days”, Martin said.
The attack was largely affecting information stored on central servers and officials said they were not aware that any patient data had been compromised. Hospital equipment was not impacted, with the exception of radiography services.
“More services are working than not today,” the HSE’s Chief Operations Officer Anne O’Connor told national broadcaster RTE.
“However, if this continues to Monday, we will be in a very serious situation and will be cancelling many services. At this moment, we can’t access lists of people scheduled for appointments on Monday so we don’t even know who to cancel.”
‘DISTRESSING FOR PATIENTS’
While scheduled COVID-19 tests will go ahead as planned on Friday, the HSE said its referrals system was down, meaning anyone else requiring a test must attend walk-in sites which are currently operating in just over half of Ireland’s 26 counties.
The portal for booking vaccine appointments was back online by 1730 GMT after being offline for the day, the HSE said.
A major Dublin maternity hospital cancelled all outpatient appointments until Tuesday other than those for women 36 or more weeks pregnant or in need of urgent care. Routine appointments were also cancelled in some but not all other hospitals.
The state’s child and family agency, Tusla, said its IT systems, including the portal through which child protection referrals are made, are not currently operating.
At Cork University Hospital, the largest in Ireland’s second city, staff arrived to find IT systems paralysed, with all computers switched off.
“Our main concern is patient safety and results that might be outstanding, laboratory data that needs to be available to manage patient care today. It’s very distressing for patients,” Medical Oncologist Seamus O’Reilly told RTE.
Reporting by Padraic Halpin and Conor HumphriesEditing by Catherine Evans and Rosalba O’Brien
