A ransomware hack against the Irish health service’s IT system has been described as “catastrophic”, as the government tests a decryption tool in the hope of restoring it to full capacity.
The number of appointments in some parts of the Republic of Ireland has dropped by 80% since the attack was identified late last week, with health care staff attempting to continue working with paper records.
Paul Reid, chief executive of the Health Service Executive (HSE), said the attack was a “callous act” on health workers who have been working “relentlessly through the pandemic”.
“I really do believe this is quite a stomach-churning criminal act,” he said.
“To launch an attack of such a massive scale on sick and vulnerable people in this country in the midst of a global pandemic is quite an extraordinary thing to do.
“There is no doubt it is a vicious and a callous act and will be condemned everywhere by decent people.
“It is also specifically an attack on health care workers, having worked relentlessly for 15 months, making many personal sacrifices and taking many personal risks and providing care for people most impacted by COVID-19.”
Ireland’s Department of Health was hit by a ransomware attack last Thursday, and the HSE on Friday.
It has caused cancellations to outpatient services, but Mr Reid said that the HSE response has been “comprehensive” and will “continue to be relentless”.
However, he said work to undo the damage continues.
Speaking at an HSE media briefing, Mr Reid said: “We are now in the assessment phase where we’re assessing all across the network… to understand the impacts across the network.”
Mr Reid said the Irish health service uses 2,000 systems and 4,500 servers and the damage means tech specialists have to rebuild a “legacy network of 30 years”.
Due to the ransomware attack on our IT systems, there continues to be disruptions to our services. More details on service disruptions here: https://t.co/AaXcK1cwr0 pic.twitter.com/sZ7dfmoMoc
The cyber attack on our IT systems has had an impact on HSE Radiotherapy Centres across the country. Patients waiting for radiation treatment will be contacted directly about their appointments. Learn more here: https://t.co/4OAmJKP6PS pic.twitter.com/A7eazpd6xB
The hackers made ransom demands on Monday, threatening to release patient data, but Taoiseach Micheál Martin has ruled out paying.
The government said the decryption tool is being tested to ensure that it will “support restoration of our systems rather than cause further harm”, but there remains no timescale for when medical services may be back online.