1. How many computers in your Trust were infected with Ransomware in the WannaCry attack in May this year?

The Trust does hold this information; however we are withholding it under Section 31 (3) of The Freedom of Information Act as the disclosure could prejudice the prevention or detection of (cyber) crime. There is therefore significant public interest in not providing this information.

1. How many (i) operations and (ii) patient appointments were cancelled as a result of the WannaCry attack?

This information is available on the Trust’s website at https://hgs.uhb.nhs.uk/foi-5262-cyber-attacks/ . We are therefore withholding this information under Section 21 of the Freedom of Information Act 2000 “information already accessible “.

1. How much money did you pay to enable you to use these computers again following the WannaCry attack?

This information is available on the Trust’s website at https://hgs.uhb.nhs.uk/foi-5262-cyber-attacks/ . We are therefore withholding this information under Section 21 of the Freedom of Information Act 2000 “information already accessible “.

1. In (i) 2014/15 and (ii) 2015/16 how many times were the Trust hit by Ransomware attacks and how much money did the Trust pay to the cyber criminals to release your machines?

The Trust was not affected by ransomware in 2014/15 or 2015/16