Cyber Attackers Target NHS Trusts Using Windows XP
By Enzo Daniele, Linked In, Twitter
Many organisations across the NHS are still running Windows XP. No surprise, when migrating to newer and more secure operating systems represents a major upheaval.
For cash-strapped hospitals, re-platforming to Windows 7 or Windows 10 is no easy task when the core mission is ensuring that funds are focused on – and directed to - patient care.
What’s more, NHS IT teams have to consider a variety of factors. First, there is the potential capital cost involved in refreshing hardware estates to cope with the operating demands of Windows 7 or Windows 10.
Then, there’s the herculean task of managing the upgrade and integration of the myriad of applications built upon Windows XP for the needs of oncology, pharmacy or clinical users.
But sitting on the sidelines on this vital security issue is no longer an option. Because the risk involved in running XP have recently been put into the spotlight.
It’s been two years since Microsoft ended support for Windows XP. And that means vulnerabilities will never be patched – making XP computers sitting ducks for cyber criminals to attack.
According to research by Citrix, a shocking 90% of NHS Trusts still use Windows XP – albeit on a smaller overall percentage of devices in some cases.
But recent well publicised attacks on NHS Trusts – like those in Lincolnshire and East Yorkshire – should serve as a wake-up call. In each of these instances, cyber attackers exploited security vulnerabilities in Windows XP to try to hold hospitals to ransom.
And only this week, Barts Health Trust confirmed that four London-based hospitals using Windows XP were experiencing a ransomware virus attack.
At the end of last year, the Government warned that hacking was ‘no longer the stuff of spy thrillers and action movies’ but a clear and present threat. Ministers also affirmed that the large quantity of sensitive data held by the NHS makes it a prime target.
So, what’s holding NHS Trusts back?
Part of the problem is tackling the task of scoping out exactly what’s involved in re-platforming entire hospitals. It’s a daunting task – and one that risks disrupting the day-to-day operations of multiple service users.
No wonder that for many IT directors/ teams, the risks involved in upgrading appear just as much a challenge as that of staying below the radar of cyber attackers.
But doing nothing is no longer an option.
If XP can’t be replaced, then NHS organisations will have to undertake significant mitigation actions to ensure patient data is protected – and mission critical systems are not at risk of compromise.
But the good news is that PSTG can help.
We’ve got extensive experience helping NHS organisations plan their transition to an interim solution and upgrade to a new desktop operating system. What’s more, we can advise on the upgrading and patching critical applications built on Windows XP to support more current operating systems.
To find out how we can help your organisations make a cost-effective and risk free shift from Windows XP, then why not get in touch for an initial chat.