साइबर सुरक्षा के बुनियादी उपाय
साइबर सुरक्षा जागरूकता का परिचय - एसएसएल ड्रैगन - SSL Dragon
इस डिजिटल फ्रंटियर को सुरक्षित रूप से नेविगेट करने के लिए, यह जरूरी है कि हम सामूहिक रूप से साइबर सुरक्षा जोखिमों की अपनी समझ को मजबूत करें और उन्हें कम करने के लिए सक्रिय उपाय अपनाएं। यह लेख साइबर ...
HSE पर रैंसमवेयर हमले
बेशक, आईटी विभागों को उदाहरण के लिए विपणन प्रबंधकों की तुलना में साइबर सुरक्षा की बहुत गहरी समझ है। फिर भी, सभी कर्मचारियों को सुरक्षा स्वच्छता और बहुत देर होने से पहले खतरे को पहचानने की क्षमता के बारे में एक ही पृष्ठ पर होना चाहिए। फ़िशिंग ईमेल अटैचमेंट खोलने वाले एक कर्मचारी ने आयरलैंड की राष्ट्रीय स्वास्थ्य सेवा <anchor>HSE पर रैंसमवेयर हमले</anchor> का कारण बना, जिसके परिणामस्वरूप €100 मिलियन का नुकसान हुआ।
Opening of email attachment led to HSE cyber attack, report finds – The Irish Times
Opening of email attachment led to HSE cyber attack, report finds – The Irish Times

Sections

[![The Irish Times](https://static.themebuilder.aws.arc.pub/irishtimes/1647534191733.svg)](/ "The Irish Times")

[Subscribe](/subscribe)

[Subscribe](/subscribe)

[Subscribe](/subscribe)

- [Home](/)
- [Latest](/latest)
- [Subscriber Only](/subscriber-only/)
- [Ireland](/ireland)



- [Dublin](/ireland/dublin)
- [Education](/ireland/education)
- [Housing & Planning](/ireland/housing-planning)
- [Social Affairs](/ireland/social-affairs)
- [Stardust](/ireland/stardust/)

- [Politics](/politics)



- [Poll](/politics/poll/)
- [Oireachtas](/politics/oireachtas)
- [Common Ground](/common-ground/)
- [Elections & Referendums](/politics/elections-referendums/)

- [Opinion](/opinion)



- [Editorials](/opinion/editorials)
- [An Irish Diary](/opinion/an-irish-diary)
- [Letters](/opinion/letters)
- [Cartoon](/opinion/cartoon)

- [Business](/business)



- [Budget 2025](/budget/)
- [Economy](/business/economy)
- [Farming & Food](/business/farming-food)
- [Financial Services](/business/financial-services)
- [Innovation](/business/innovation)
- [Markets](/business/markets)
- [Work](/business/work)
- [Commercial Property](/property/commercial-property)

- [World](/world)



- [US Election](/world/us-election/)
- [Europe](/world/europe)
- [UK](/world/uk)
- [US](/world/us)
- [Canada](/world/canada)
- [Australia](/world/australia)
- [Africa](/world/africa)
- [Americas](/world/americas)
- [Asia-Pacific](/world/asia-pacific)
- [Middle East](/world/middle-east)

- [Sport](/sport)



- [Gaelic Games](/sport/gaelic-games)
- [Rugby](/sport/rugby)
- [Soccer](/sport/soccer)
- [Golf](/sport/golf)
- [Racing](/sport/racing)
- [Athletics](/sport/athletics)
- [Boxing](/sport/boxing)
- [Cycling](/sport/cycling)
- [Hockey](/sport/hockey)
- [Tennis](/sport/tennis)

- [Your Money](/your-money)



- [Pricewatch](/tags/pricewatch)
- [Budget 2025](/budget/)

- [Crime & Law](/crime-law)



- [Courts](/crime-law/courts)

- [Property](/property)



- [Residential](/property/residential)
- [Commercial Property](/property/commercial-property)
- [Interiors](/property/interiors)

- [Food](/food)



- [Drink](/food/drink)
- [Recipes](/food/recipes)
- [Restaurants](/food/restaurants)

- [Health](/health)



- [Your Family](/health/your-family)
- [Your Fitness](/health/your-fitness)
- [Your Wellness](/health/your-wellness)
- [Get Running](/health/your-fitness/get-running)

- [Life & Style](/life-style)



- [Fashion](/life-style/fashion)
- [Beauty](/tags/beauty/)
- [Fine Art & Antiques](/life-style/fine-art-antiques)
- [Gardening](/life-style/gardening)
- [People](/life-style/people)
- [Travel](/life-style/travel)

- [Culture](/culture)



- [Art](/culture/art)
- [Books](/culture/books)
- [Film](/culture/film)
- [Music](/culture/music)
- [Stage](/culture/stage)
- [TV & Radio](/culture/tv-radio)

- [Environment](/environment)



- [Climate Crisis](/environment/climate-crisis)

- [Technology](/technology)



- [Big Tech](/technology/big-tech)
- [Consumer Tech](/technology/consumer-tech)
- [Data & Security](/technology/data-security)
- [Gaming](/technology/gaming)

- [Science](/science)



- [Space](/science/space)

- [Media](/media)
- [Abroad](/abroad)
- [Obituaries](/obituaries)
- [Transport](/transport)
- [Motors](/motors)



- [Car Reviews](/motors/car-reviews/)

- [Listen](/listen)
- [Podcasts](/podcasts)



- [In the News Podcast](/podcasts/in-the-news)
- [Inside Politics Podcast](/podcasts/inside-politics)
- [The Women's Podcast](/podcasts/the-womens-podcast)
- [Inside Business Podcast](/podcasts/inside-business)
- [Ross O'Carroll-Kelly](/podcasts/ross-ocarroll-kelly)
- [The Counter Ruck Podcast](/podcasts/the-counter-ruck)
- [Web 1.0](/podcasts/web1)

- [Video](/video)
- [Photography](/photography)
- [History](/history)



- [Century](/history/century)

- [Tuarascáil](/tuarascail)
- [Student Hub](/student-hub)
- [Offbeat](/offbeat)
- [Crosswords & Puzzles](/crosswords-puzzles)



- [Crosaire](/crosswords-puzzles/crosaire)
- [Simplex](/crosswords-puzzles/simplex)
- [Sudoku](/crosswords-puzzles/sudoku)

- [Family NoticesOpens in new window](https://notices.irishtimes.com)
- [Sponsored](/sponsored)



- [Advertising Feature](/advertising-feature)
- [Special Reports](/special-reports)

- [Subscriber Rewards](/subscriber-rewards/)
- [Competitions](/competitions)
- [Weather Forecast](/weather)

[Crime & Law](/crime-law/)

# Opening of email attachment led to HSE cyber attack, report finds

## Ransomware attack could be repeated and HSE is taking steps to mitigate risk, says Reid

![](https://www.irishtimes.com/resizer/v2/RSQC7LKKQK775FHISQMPJVV6N4.jpg?auth=99f0a181d783e68eea10c631fc91640cd21a513b617c9d850d4f8f3fe1c74a86&smart=true&width=1024&height=545)

Alerts were raised within the health service over eight weeks that the IT system might be compromised, but the significance of the alerts was not identified at the time. Photograph: iStock

[Colm Keena](/author/colm-keena/)

Fri Dec 10 2021 - 12:08

- [Facebook](https://www.facebook.com/share.php?u=https://www.irishtimes.com/news/crime-and-law/opening-of-email-attachment-led-to-hse-cyber-attack-report-finds-1.4752043 "Facebook")
- [X](https://twitter.com/intent/tweet?url=https://www.irishtimes.com/news/crime-and-law/opening-of-email-attachment-led-to-hse-cyber-attack-report-finds-1.4752043&text=Opening%20of%20email%20attachment%20led%20to%20HSE%20cyber%20attack%2C%20report%20finds "X")
- [WhatsApp](https://api.whatsapp.com/send?text=https://www.irishtimes.com/news/crime-and-law/opening-of-email-attachment-led-to-hse-cyber-attack-report-finds-1.4752043 "WhatsApp")
- - [Email](mailto:?subject=Opening%20of%20email%20attachment%20led%20to%20HSE%20cyber%20attack%2C%20report%20finds&body=https://www.irishtimes.com/news/crime-and-law/opening-of-email-attachment-led-to-hse-cyber-attack-report-finds-1.4752043 "Email")
- [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https://www.irishtimes.com/news/crime-and-law/opening-of-email-attachment-led-to-hse-cyber-attack-report-finds-1.4752043 "LinkedIn")
- [Reddit](https://reddit.com/submit?url=https://www.irishtimes.com/news/crime-and-law/opening-of-email-attachment-led-to-hse-cyber-attack-report-finds-1.4752043&title=Opening%20of%20email%20attachment%20led%20to%20HSE%20cyber%20attack%2C%20report%20finds "Reddit")
- [Pinterest](https://pinterest.com/pin/create/bookmarklet/?url=https://www.irishtimes.com/news/crime-and-law/opening-of-email-attachment-led-to-hse-cyber-attack-report-finds-1.4752043&description=Opening%20of%20email%20attachment%20led%20to%20HSE%20cyber%20attack%2C%20report%20finds&media= "Pinterest")

The opening of a malicious Microsoft Excel file attached to a phishing email led to the cyber attack that crippled the national health service earlier this year, according to a report on the incident published on Friday.

The file was opened at a HSE workstation on March 18th, with the email having been sent to the "patient zero workstation" two days earlier.

Over the coming eight weeks, a number of “alerts” were raised within the health service that the IT system might be compromised, but the significance of the alerts was not identified at the time.

The ransomware that was introduced into the system was “detonated” on May 14th, leading to an immediate crisis across the health service.

READ MORE

## [More than 100 cases linked to trafficking and slavery being investigated, gardaí say](/news/crime-and-law/more-than-100-cases-linked-to-trafficking-and-slavery-being-investigated-gardai-say-1.4750416)

[![](https://www.irishtimes.com/resizer/v2/TDWBJFSVEXIYOFQAVLGQJVTUE4.jpg?smart=true&auth=6494b7053a76caf67ebe58f0e9a0edb56e45838c4745cb093f9062fa8ca16031&width=800&height=533)](/news/crime-and-law/more-than-100-cases-linked-to-trafficking-and-slavery-being-investigated-gardai-say-1.4750416)

* * *

## [Man being treated for gunshot wounds after Tallaght shooting](/news/crime-and-law/man-being-treated-for-gunshot-wounds-after-tallaght-shooting-1.4746006)

[![](https://www.irishtimes.com/resizer/v2/BKARQALOYUOUBHBE52DN2VHTOE.jpg?smart=true&auth=4118ff0a3b148e7012ed742bfcdd0bb661e0e849887f24bff98a0c61e94b4ee0&width=800&height=533)](/news/crime-and-law/man-being-treated-for-gunshot-wounds-after-tallaght-shooting-1.4746006)

* * *

## [Judge Rory MacCabe to succeed Ms Justice Mary Ellen Ring as Gsoc chair](/news/crime-and-law/judge-rory-maccabe-to-succeed-ms-justice-mary-ellen-ring-as-gsoc-chair-1.4749452)

[![](https://www.irishtimes.com/resizer/v2/XEI2QA54QV2L4BLKWRMRIWH244.jpg?smart=true&auth=4b3e4fd4a1fb7f5b71f8139bfe2d7096d5fe28c8c88edf26abf28e294d63e940&width=800&height=533)](/news/crime-and-law/judge-rory-maccabe-to-succeed-ms-justice-mary-ellen-ring-as-gsoc-chair-1.4749452)

* * *

## [Two arrested in connection with firebomb incident at Co Clare house](/news/crime-and-law/two-arrested-in-connection-with-firebomb-incident-at-co-clare-house-1.4746350)

[![](https://www.irishtimes.com/resizer/v2/CWANBU6N4PT7ZEU2THHXZLVU2I.jpg?smart=true&auth=5d9e939aefa6fc11ae6a2ee3b2b732fcdab68cf3ebcb5bb7818c7556c0531f77&width=800&height=533)](/news/crime-and-law/two-arrested-in-connection-with-firebomb-incident-at-co-clare-house-1.4746350)

* * *

At a press briefing prior to the publication of the report, HSE chief executive Paul Reid said a high proportion of the organisations that are subjected to a cyber attack are "re-hit" and that actions have and are being taken to mitigate the risk to the service.

The response to the alerts that were raised did not involve the response that should have occurred, he said.

The Department of Health, and an unidentified hospital, took steps prior to May 14th that mitigated the effect of the attack on their systems, the briefing was told.

#### ‘Frail’ IT system

The report, commissioned by the HSE from PwC, identified the “frail” nature of the dispersed IT system used by the health service as a key weakness and recommends a multi-year programme of investment in IT and cybersecurity.

There was a “known low level of cybersecurity maturity” within the HSE and the connected national health network, and this weakness had “persisted”, the report said.

An extra €100 million is to be spent on this issue next year, Mr Reid said, and a business case for an as-yet-uncosted multi-year investment programme is being worked on.

A subcommittee of the HSE board should be set up and should ensure requests for funding to the Government for an IT upgrade “are clearly articulated and the risks associated with the lack of investment are communicated and understood,” the report said.

The report is to be shared with other State and non-State organisations to inform their future preparedness against cybercrime, which is “increasing in frequency, magnitude and sophistication, with cybercriminals operating across jurisdictions and country borders”.

#### Ransom

The report does not deal with the issues of a ransom or the location of the criminals behind the attack, but the Government said at the time no ransom would be paid, and a number of observers have said the criminal gang responsible is mostly likely based in Russia.

The report noted the staff in the health service showed “dedication and effort” in response to the crisis with individuals across the HSE and elsewhere in the health system responding in a way that illustrated they are “resilient, respond quickly, and have an ability to implement actions and workarounds” in times of emergency.

It noted the HSE is the largest employer in the State and uses more than 70,000 devices, such as personal computers and laptops.

When the Conti ransomware attack was launched early on Friday, May 14th, it resulted in healthcare professionals losing access to all HSE-provided IT systems.

“Healthcare services across the country were severely disrupted with real and immediate consequences for the thousands of people who require health services every day.”

At the press briefing Mr Reid said there was no indication that any patient had died as a result of the cyber attack, and that “great credit” was due to those in the health service for the way they had responded.

The report details how cybercriminals have been targeting healthcare providers and healthcare organisations in the United States, Australia and New Zealand, though Ireland was the first jurisdiction to suffer an attack on its national health service.

Last month much of the provincial healthcare system in Newfoundland was attacked.

The report said it appeared that the criminals used “relatively well-known techniques and software to execute their attack”.

#### Personal data

The report details how once the criminals had gained access to the health service system, they compromised and abused a significant number of accounts with high levels of privileges, compromised a significant number of servers, exfiltrated data, and moved their operation to statutory and voluntary hospitals.

At the press briefing, the HSE's interim chief information officer, Fran Thompson, said the normal and the "dark" web were being monitored to ensure people's data was not published.

The seriousness of the attack on the health service could have been greater, the report noted, “if there had been an intent by the attacker to target specific devices within the HSE environment, eg medical devices”; if the criminals had tried to destroy data at scale; or if they had interfered with the system used by the Covid-19 vaccination scheme.

It is likely that the time it took to recover from the attack would have been “considerably longer” if the criminals had not, on May 20th, posted a link to a key that decrypted files encrypted by the Conti ransomware.

The report noted the areas of the health service that were best equipped to maintain clinical services during the prolonged IT outage were those that rely on paper records for patient services.

It said the seriousness of the deficiencies in the health network system persist and require “transformational change”.

It is clear that very significant investment “on an immediate and sustained basis” will be required to improve the HSE’s IT system and its security.

Improving the system – which “evolved” rather than having been designed, and which involves a cybersecurity risk that is common to all organisations connected to the national health network – will be a “complex programme”, the report said.

The vulnerabilities that are highlighted in the report are not unique to the HSE, the PwC report said, and all organisations therefore need to consider the extent to which they are protected from a major cyber incident.

“The HSE, the State, and non-State organisations, now have an opportunity to build a more robust and resilient cyber frontier nationally.”

![Colm Keena](https://s3.amazonaws.com/arc-authors/irishtimes/48c64755-8523-47c7-a6ff-0584b339c85c.png)

[**Colm Keena**](/author/colm-keena/)

Colm Keena is an Irish Times journalist. He was previously legal-affairs correspondent and public-affairs correspondent

[Opens in new window](mailto:ckeena@irishtimes.com) [Opens in new window](https://twitter.com/cpkeena)

[HSE](/tags/hse/) [Fran Thompson](/tags/fran-thompson/) [Paul Reid](/tags/paul-reid/)

### [Fresh appeal for information over murder of Jim Donegan in west Belfast](/news/crime-and-law/fresh-appeal-for-information-over-murder-of-jim-donegan-in-west-belfast-1.4747060)

### [Gsoc investigation into shooting of George Nkencho delayed again](/news/crime-and-law/gsoc-investigation-into-shooting-of-george-nkencho-delayed-again-1.4746067)

### [Almost 40 dogs seized from ‘inhumane’ conditions in two Dublin apartments](/news/crime-and-law/almost-40-dogs-seized-from-inhumane-conditions-in-two-dublin-apartments-1.4745000)

### [Gardaí seize €1.3 million in cannabis, cocaine in Dublin raids](/news/crime-and-law/gardai-seize-1-3-million-in-cannabis-cocaine-in-dublin-raids-1.4742890)

### [Expert investigating cancelled 999 calls not able to examine recordings](/news/crime-and-law/expert-investigating-cancelled-999-calls-not-able-to-examine-recordings-1.4742771)

### [Woman’s wedding ring missing after she finds man hiding in home](/news/crime-and-law/woman-s-wedding-ring-missing-after-she-finds-man-hiding-in-home-1.4741219)

* * *

### IN THIS SECTION

### [Ian Bailey’s solicitor criticises ‘feral attack’ on his client by Micheál Martin](/crime-law/2024/09/13/ian-baileys-solicitor-criticises-feral-attack-on-his-client-by-micheal-martin/)

### [Prof Philip Nolan refused Supreme Court appeal over pre-trial employment status](/crime-law/courts/2024/09/13/prof-philip-nolan-refused-supreme-court-appeal-over-pre-trial-employment-status/)

### [Part-time press photographer attacks professional body in gender bias claim](/crime-law/courts/2024/09/13/part-time-press-photographer-attacks-professional-body-in-gender-bias-claim/)

### [Gardaí warn about ‘misinformation and fake news’ over incident in Blakestown](/crime-law/2024/09/13/gardai-warn-about-misinformation-and-fake-news-over-incident-at-blakestown-school/)

### [Taxi driver who operates strict ‘cash only’ policy appeals revocation of licence in court](/crime-law/courts/2024/09/13/taxi-driver-who-operates-strict-cash-only-policy-appeals-revocation-of-license-in-court/)

[**MOST READ**](/most-read/)

### [Spray foam insulation: as 300,000 UK homeowners are left in a tight spot, Irish surveyors have their own warnings](/property/residential/2024/09/12/think-long-and-hard-as-uk-lenders-clamp-down-on-spray-foam-insulation-should-irish-homeowners-avoid-it/)

### [Two men found hiding in toilets at Shannon airport given suspended sentences](/crime-law/courts/2024/09/11/two-men-found-hiding-in-toilets-at-shannon-airport-given-suspended-sentences/)

### [‘A true lady ... always smiling’: Tributes paid to Kildare nurse who died in Sardinia](/ireland/2024/09/13/a-true-lady-always-smiling-tributes-paid-to-kildare-nurse-who-died-in-sardinia/)

### [Hiberno-English just does so many things that standard English can’t and I am clinging to it](/life-style/people/2024/09/13/living-in-ireland-is-to-be-blessed-with-a-beautiful-poetry-for-the-most-mundane-of-interactions/)

### [James ‘Jaws’ Byrne: Fixer, fear merchant, father](/crime-law/2024/09/14/james-jaws-byrne-gangland-patriarch-but-never-a-boss/)

[**LATEST STORIES**](/latest/)

## [Pope criticises Harris and Trump, telling US Catholics to ‘choose the lesser evil’ in election vote](/world/us/2024/09/13/pope-criticises-harris-and-trump-telling-us-catholics-to-choose-the-lesser-evil-in-election-vote/)

* * *

## [Justin Timberlake pleads guilty to impaired driving following arrest in June](/world/us/2024/09/13/justin-timberlake-pleads-guilty-to-impaired-driving-following-arrest-in-june/)

* * *

## [UK government will not fund Casement Park redevelopment in time for Euro 2028](/ireland/2024/09/13/uk-government-will-not-fund-casement-park-redevelopment-benn-tells-stormont/)

* * *

## [Western allies should think carefully about Putin’s war warning, says former UK official](/world/europe/2024/09/13/us-and-uk-edge-towards-approving-ukraines-use-of-long-range-weapons-in-russia/)

* * *

## [Ian Bailey’s solicitor criticises ‘feral attack’ on his client by Micheál Martin](/crime-law/2024/09/13/ian-baileys-solicitor-criticises-feral-attack-on-his-client-by-micheal-martin/)

* * *

[Facebook page](https://www.facebook.com/irishtimes/) [Twitter feed](https://twitter.com/IrishTimes)

© 2024 The Irish Times DAC

### Subscribe

- [Why Subscribe?](/your-subscription/subscription-tour)
- [Subscription Bundles](/subscribe)
- [Subscriber Rewards](/subscriber-rewards/)
- [Subscription Help CentreOpens in new window](https://help.irishtimes.com/s/)
- [Home DeliveryOpens in new window](http://www.newsdelivery.ie)
- [Gift Subscriptions](/subscribe/gift)

### Support

- [Contact Us](/about-us/contact-us)
- [Help CentreOpens in new window](https://help.irishtimes.com/s/)
- [My Account](/myaccount)

### About Us

- [Advertise](/about-us/advertise)
- [Contact Us](/about-us/contact-us)
- [The Irish Times Trust](/about-us/the-irish-times-trust/)
- [Careers](/about-us/career-opportunities)

### Irish Times Products & Services

- [ePaper](/epaper)
- [Crosswords & puzzles](/crosswords-puzzles/)
- [Newspaper Archive](/archive)
- [Newsletters](/newsletters)
- [Article IndexOpens in new window](https://www.irishtimes.com/article-index/)
- [Discount CodesOpens in new window](https://discountcodes.irishtimes.com/)

![The Irish Times](https://static.themebuilder.aws.arc.pub/irishtimes/1647534191733.svg)

**Download the app** [![Download on the App Store](https://cloudfront-eu-central-1.images.arcpublishing.com/irishtimes/BJJKNJJHDJDGDDODHEER7FDH44.png)](https://apps.apple.com/ie/developer/the-irish-times-ltd/id365544597) [![Download on Google Play](https://cloudfront-eu-central-1.images.arcpublishing.com/irishtimes/T2XGUGDSUZCOZAYIQEKG2TWML4.png)](https://play.google.com/store/apps/developer?id=The+Irish+Times+Ltd)

[MyHome.ieOpens in new window](https://www.myhome.ie) [The GlossOpens in new window](https://www.thegloss.ie) [Recruit IrelandOpens in new window](https://recruitireland.com/) [Irish Times TrainingOpens in new window](https://www.irishtimestraining.com/) [RIP.ieOpens in new window](https://rip.ie/)

* * *

- [Terms & Conditions](/policy-and-terms/terms-conditions/)
- [Privacy Policy](/policy-and-terms/privacy-policy/)
- [Cookie Information](/policy-and-terms/cookie-policy/)
- [Cookie Settings](#/)
- [Community Standards](/policy-and-terms/community-standards/)
- [Copyright](/policy-and-terms/copyright/)