NHS cyber attack: Change needed to protect valuable yet vulnerable hospital IT systems

By Weizi Vicky Li, Informatics Research Centre, Henley Business School

With healthcare service scopes expanding, healthcare processes changing and technologies evolving over time, many systems need improvement or they become vulnerable to cyber-attacks. This is especially true in hospitals, where most legacy systems provide critical  information and essential support for business operations with a lot of sensitive data.

Information systems and intranet/internet have been implemented in NHS hospitals for more than 30 years. Early systems implemented in the NHS include Patient Administration System, GP systems, Pathology laboratory systems, radiology and PACS systems, nursing and care planning systems, theatre systems etc.

The threats lie in the fact that many of the legacy systems have long been integrated into the core business and healthcare service processes, and therefore cannot be simply scrapped. In short, those legacy systems are valuable as well as vulnerable.

Continue reading