NHS Dumfries & Galloway

Cyber attacks on NHS Dumfries and Galloway

Frequently Asked Questions

    • Is my patient information safe? NHS DG still holds the original files and they have not been altered or deleted. Some information has been copied and leaked. NHS DG has contacted everyone whose information is known to have been leaked. We are still investigating how much information has been stolen. Unfortunately we cannot yet rule out that more information will be leaked in the future.
    • Does this mean you no longer have my medical records? No, that is not what it means. The attackers managed to copy data from our systems – but the original files are still safe and have not been deleted or altered.
    • Could my patient information have been maliciously altered – removing or changing important information about my health? No. While some information has been illegally copied from NHS DG records, and has now been leaked, NHS DG and other agencies have carried out careful checks of our systems, and we are confident that your records have not been tampered with.
    • Is my appointment still happening? Unless you have been specifically told otherwise, you should assume that consultations, tests, referrals, scheduled treatments, and other appointments will happen as normal. While the theft of patient data is a very serious crime, it has not stopped NHS Dumfries and Galloway from delivering care as normal.
    • Does this mean I am at risk of attack? It is possible that stolen information could be used in an attack. Everyone should be cautious regarding their own online activity. For more advice on how to stay safe online, see https://www.ncsc.gov.uk/guidance/data-breaches
    • If I get an email from an NHS address, how do I know it’s legitimate? If you receive an unexpected or suspicious email or a communication by other means that claims to come from the NHS, you should double-check that it’s legitimate by contacting the organisation or department directly. Don’t use an address or phone number from the message itself – use the details on our official website at www.nhsdg.co.uk
    • When will we know more? The criminal investigation by Police Scotland, supported by other agencies, into this attack is still going on – there is a limited amount that we can share without jeopardising this work. When we are able to release more information about the attack, we will do so through nhsdg.co.uk/cyberattack
    • I have a question that isn’t on this list. Where can I find out the answer? Further information is online at nhsdg.co.uk/cyberattack – please check back frequently for updates. Because this situation is still developing, and it is also an ongoing criminal investigation, we may not be able to answer all your questions, and we apologise for that.
    • I want to complain about this. Please visit nhsdg.co.uk/how-did-we-do which has information about how to send in feedback on our services, and how to make a complaint.
    • I am a member of the media with an enquiry. Please email dgcommunications@nhs.scot and we will respond to your enquiry as soon as we can.