What happened to the NHS computer virus?

What happened to the NHS computer virus?

Author
Discussion

jonah35

Original Poster:

3,940 posts

157 months

Saturday 27th May 2017
quotequote all
Did they pay the ransom in the end? I heard they did.

Shaw Tarse

31,543 posts

203 months

Saturday 27th May 2017
quotequote all
They couldn't crack the doctor's receptionist.

bitchstewie

51,179 posts

210 months

Saturday 27th May 2017
quotequote all
Some did most didn't it's not a binary thing as the trusts control their data independently.

alorotom

11,939 posts

187 months

Saturday 27th May 2017
quotequote all
Some trusts are still rolling back their infected computers (St Barts for example)

All others had their outsourced IT depts take control and patch the issues and then roll back to the previous days full backup

No ransoms have been paid by the NHS at all

alorotom

11,939 posts

187 months

Saturday 27th May 2017
quotequote all
bhstewie said:
Some did most didn't it's not a binary thing as the trusts control their data independently.
None paid anything in ransoms

Cold

15,244 posts

90 months

Saturday 27th May 2017
quotequote all
They passed it on to BA in an email titled "You won't believe what these celebrities look like now".

motco

15,945 posts

246 months

Saturday 27th May 2017
quotequote all
Our local hospital had only just upgraded to Windows 10 when it hit. Much relief all round!

Mr MXT

7,692 posts

283 months

Saturday 27th May 2017
quotequote all
The hospital Mrs MXT works in wasn't affected, as they still use Windows 95.

bitchstewie

51,179 posts

210 months

Saturday 27th May 2017
quotequote all
alorotom said:
None paid anything in ransoms
My mistake, I thought one or two of the smaller shops had.

motco

15,945 posts

246 months

Saturday 27th May 2017
quotequote all
Mr MXT said:
The hospital Mrs MXT works in wasn't affected, as they still use Windows 95.


GC8

19,910 posts

190 months

Saturday 27th May 2017
quotequote all
My understanding was that the bogus domain was registered. It replies and the malware exits, so whilst the infection remained it didn't function.

Jessicus

374 posts

146 months

Saturday 27th May 2017
quotequote all
AV companies developed antidotes within hours. Encryption keys were found and the website "kill switch" was activated.

Any data lost will have been recovered from backups held offline.

Caused problems, but nothing that any major organisation should have issues recovering from.

Positives: Meant that I had a news story that I could scare our less than technical colleagues with - hopefully fewer virus/malware installations on our site.

bga

8,134 posts

251 months

Saturday 27th May 2017
quotequote all
jonah35 said:
Did they pay the ransom in the end? I heard they did.
Some individuals did. None of the trusts went that far. Solutions were found, gaps in backups were discovered and the world carried on spinning. If anything, patching is higher on the agenda than it has been for a while.