The cyber-criminals behind the major cyber attack at a London hospital have issued an apology, saying they’re “sorry” for the disruption but insist they’re “not to blame.”

 

Political Protest Controversy?

The ransomware gang reportedly attempted to frame their attack as a form of political protest. Qilin, a group notorious for extorting money, claimed they launched the cyber-attack as revenge against the UK government for its actions in an unnamed war.

However, experts remain unconvinced. Jen Ellis from the Ransomware Task Force told the BBC, “Cyber-criminals like this gang lie routinely. Where they are from and why they have carried out the attack is secondary to the harm being caused right now to patients and hospital staff.”

The attack has led to over 1,000 operations and appointments being postponed, and a critical incident being declared.

 

Motivation Behind the Cyber Attack

The hackers said, “We are very sorry for the people who suffered because of it. We don’t consider ourselves guilty and we ask you don’t blame us in this situation.” They pointed the finger at the UK government, claiming it wasn’t helping in the unspecified war.

While the gang is suspected to be based in Russia, like many ransomware crews, they wouldn’t confirm their location. They accused the UK government of not valuing the lives of those “on the front edge of free world,” a phrase reminiscent of language used about Ukraine’s fight against Russia, though it might also refer to Russian troops fighting in Ukraine.

The group deliberately targeted blood test firm Synnovis, used by two London NHS trusts. “Our citizens are dying in unequal combat from a lack of medicines and donor blood,” they said.

The gang typically demands a ransom in Bitcoin to restore infected systems or return stolen data. On their darknet site, they regularly post details about their victims, though none have been linked to political activism until now. They haven’t posted any data from Synnovis yet but indicated they might soon.

 

Impact on NHS Services

The London hospitals hack was first announced on June 3 when Synnovis reported all its IT systems offline, halting blood tests and information-sharing. Affected NHS trusts include Guy’s and St Thomas’ NHS Foundation Trust and King’s College Hospitals NHS Trust, impacting patients across multiple boroughs.

Blood tests that once took an hour can now take up to six hours, according to one hospital doctor. The disruption also led to rescheduling five planned C-sections and diverting 18 organs to other trusts. Additionally, 736 hospital outpatient appointments and 125 community outpatient appointments had to be postponed, and optional blood-borne virus tests are currently suspended.

Primary care appointments are continuing, with urgent blood tests prioritized. Synnovis is working to recover its IT systems but hasn’t confirmed if Qilin is holding it to ransom.

We hope you’ve enjoyed this blog and will stay around for future releases! We cover everything from IT Guides, to trending Cyber Security news. Stay tuned!