No mental health data taken in cyber attack, NHSE confirms

No patient data held by mental health trusts was taken following a cyber attack this summer, NHS England has confirmed.

The regulator told HSJ it had received confirmation from tech firm Advanced, which was the subject of a cyber attack in July, that no data had been breached on its Carenotes electronic patient record. The EPR is used by around a dozen mental health trusts.

The process of reconnecting trusts fully back to Carenotes also started this week, after providers spent two months with limited or no access to their EPR.

HSJ previously revealed that senior NHS chiefs feared patient data may have been taken or accessed by those responsible for the cyber attack, who issued ransom demands to Advanced.

Since then, experts have been brought in to investigate any potential data impact following the attack.

Read full story (paywalled)

Source: HSJ, 21 September 2022