What happened to the NHS computer virus?
What happened to the NHS computer virus?
Author
Discussion

jonah35

Original Poster:

3,940 posts

187 months

Saturday 27th May 2017
quotequote all
Did they pay the ransom in the end? I heard they did.

Shaw Tarse

31,898 posts

233 months

Saturday 27th May 2017
quotequote all
They couldn't crack the doctor's receptionist.

bitchstewie

68,004 posts

240 months

Saturday 27th May 2017
quotequote all
Some did most didn't it's not a binary thing as the trusts control their data independently.

alorotom

12,788 posts

217 months

Saturday 27th May 2017
quotequote all
Some trusts are still rolling back their infected computers (St Barts for example)

All others had their outsourced IT depts take control and patch the issues and then roll back to the previous days full backup

No ransoms have been paid by the NHS at all

alorotom

12,788 posts

217 months

Saturday 27th May 2017
quotequote all
bhstewie said:
Some did most didn't it's not a binary thing as the trusts control their data independently.
None paid anything in ransoms

Cold

16,728 posts

120 months

Saturday 27th May 2017
quotequote all
They passed it on to BA in an email titled "You won't believe what these celebrities look like now".

motco

17,649 posts

276 months

Saturday 27th May 2017
quotequote all
Our local hospital had only just upgraded to Windows 10 when it hit. Much relief all round!

Mr MXT

7,793 posts

313 months

Saturday 27th May 2017
quotequote all
The hospital Mrs MXT works in wasn't affected, as they still use Windows 95.

bitchstewie

68,004 posts

240 months

Saturday 27th May 2017
quotequote all
alorotom said:
None paid anything in ransoms
My mistake, I thought one or two of the smaller shops had.

motco

17,649 posts

276 months

Saturday 27th May 2017
quotequote all
Mr MXT said:
The hospital Mrs MXT works in wasn't affected, as they still use Windows 95.


GC8

19,910 posts

220 months

Saturday 27th May 2017
quotequote all
My understanding was that the bogus domain was registered. It replies and the malware exits, so whilst the infection remained it didn't function.

Jessicus

374 posts

176 months

Saturday 27th May 2017
quotequote all
AV companies developed antidotes within hours. Encryption keys were found and the website "kill switch" was activated.

Any data lost will have been recovered from backups held offline.

Caused problems, but nothing that any major organisation should have issues recovering from.

Positives: Meant that I had a news story that I could scare our less than technical colleagues with - hopefully fewer virus/malware installations on our site.

bga

8,134 posts

281 months

Saturday 27th May 2017
quotequote all
jonah35 said:
Did they pay the ransom in the end? I heard they did.
Some individuals did. None of the trusts went that far. Solutions were found, gaps in backups were discovered and the world carried on spinning. If anything, patching is higher on the agenda than it has been for a while.