HSE Fined €300k Over Data Breach At Offaly Hospital

Around 84,000 people have been affected.

The HSE is being fined €300,000 following a data breach at an Offaly Hospital. 

The Data Protection Commission is announcing its final decision following an inquiry into a ransomware attack that targeted the laboratory information system at Midlands Regional Hospital Tullamore, affecting the personal data of approximately 84,000 individuals.

The cyberattack was detected on November 14th 2018. 

It saw attackers gain access to computers used to store and process patients' laboratory test results. 

The attackers subsequently encrypted the data, disrupting access to sensitive patient information.

This prompted a major investigation into the Health Service Executive's data protection practices.

The DPC found the HSE breached several provisions of GDPR, it also found shortcomings in its contractual arrangements with external service providers.

The HSE accepts the findings of the DPC Statutory Inquiry Report and says the ransomware attack was an isolated incident which was prevented from spreading any further than the lab system at the Hospital. 

The HSE says there was no adverse clinical impact as clinicians could revert to a paper-based record system.   

More from Midlands News

Download Our App