LONDON (AP) 鈥� An investigation into a ransomware attack earlier this month on London hospitals by the Russian group Qilin could take weeks to complete, the country's state-run National Health Service said Friday, as concerns grow over a reported data dump of patient records.
Hundreds of operations and appointments are still being canceled more than two weeks after , which provides pathology services primarily in southeast London.
The attack affected King鈥檚 College and Guy鈥檚 and St Thomas鈥� hospital trusts, which run several south London hospitals, as well as clinics and doctors鈥� practices across a swath of the city. A memo to staff called it a 鈥渃ritical incident鈥� and said it had a 鈥渕ajor impact鈥� on services, particularly blood transfusions.
NHS England said Friday that it has been 鈥渕ade aware鈥� that data connected to the attack have been published online. According to the BBC, Qilin shared almost 400GB of data, including patient names, dates of birth and descriptions of blood tests, on their darknet site and Telegram channel.
鈥淭he National Crime Agency and National Cyber Security Centre are working to verify the data included in the published files as quickly as possible," NHS England said in a statement. 鈥淭hese files are not simple uploads and so investigations of this nature are highly complex and can take weeks if not longer to complete.鈥�
According to Saturday's edition of the Guardian newspaper, records covering 300 million patient interactions, including the results of blood tests for HIV and cancer, were stolen during the attack.
A website and helpline has been set up for patients affected.
鈥淲e understand the distress this will cause patients who have to re-test," NHS England said.
The National Crime Agency has confirmed that it is leading the criminal investigation but said it is unable to comment further.
involves criminals paralyzing computer systems with malware, then demanding money to release them. Ransomware is the costliest and most disruptive form of cybercrime, affecting local governments, court systems, hospitals and schools as well as businesses. It is difficult to combat as most gangs are based in former Soviet states and out of reach of Western justice.
Britain鈥檚 state-funded health system has been hit before, including during a 2017 ransomware attack that froze computers at hospitals across the country, closing down wards, shutting emergency rooms and bringing treatment to a halt.
Qilin, also known as Agenda, advertises on dark web cybercrime forums and leases malware to affiliates who use it to conduct attacks for a percentage of ransom payments, said Louise Ferrett of Searchlight Cyber, a threat intelligence company. The group has listed more than 100 victims.
Pan Pylas, The Associated Press
