NHS Barts trust attacked by ransomware gang

Russian ransomware gang BlackCat has allegedly stolen 7TB of data from the NHS Trust

Add bookmark
NHS Barts trust attacked by ransomware gang

Russian ransomware gang BlackCat, also known as ALPHV, has claimed that it has stolen 7TB of data from Barts Health National Health Service (NHS) Trust.

The claim comes from the gang itself, which posted news on the cyber attack on its dark web data leaks site. The post was made on June 30, with the gang calling it the “most bigger leak [sic] from health care system in UK”.

BlackCat went on to threaten Barts Trust, saying that the organization had three days make contact with the gang regarding the cyber attack and data theft. If the Trust chose not to contact them, the gang said they would start publishing the data online, which allegedly mostly contains “citizens confidential documents”.

These documents contain, according to BlackCat, personally identifying information on both employees and clinicians at the Trust, including National Insurance numbers (referred to as Social Security Numbers by the gang).

The documents also contain financial data including client documentation and credit card information, financial reports, accounting and loan data and insurance agreements.

A spokesperson for the Barts Trust said the organization was aware of the allegations made by BlackCat and that they were investigating the claims “as a matter of urgency”.

It is unclear how BlackCat obtained the data, however due to the disruptive and destructive nature of ransomware, it is unlikely this threat vector was used against Barts Trust.

One of the biggest ransomware attacks the NHS has faced was caused by the WannaCry ransomware worm infiltrating its systems. The attack took place in May, 2017, and impacted more than 300,000 computers worldwide. For the NHS England and Scotland, the cyber attack saw 70,000 devices including computers, theatre equipment, MRI scanners and blood-storage refrigerators impacted by the malware.

Learn more about ransomware attacks by reading Cyber Security Hub’s Ultimate guide to ransomware


Upcoming Events

Automotive Cyber Security, Connectivity & SDV Week 2025

18th - 20th November, 2025

Van der Valk Hotel Berlin Brandenburg, Germany

Automotive Cyber Security, Connectivity & SDV Week 2025

Digital Identity Week

1st - 2nd September 2026

Sydney, Australia

Digital Identity Week

Latest Webinars

From Dependencies to Defences: Navigating Software Supply Chain Security

2025-09-24

11:00 AM - 12:00 PM SGT

Learn how to defend your software supply chain from dependency threats and build resilient security...

Unpacking global regulatory frameworks to enhance third-party operational resilience

2024-11-14

11:00 AM - 12:00 PM EST

Join this webinar to explore the resilience-focused requirements of DORA, NIS2 and other global regu...

Preventing financial and reputational risk with process intelligence

2024-05-23

11:00 AM - 12:00 PM EDT

Learn how to manage risk stemming from poorly controlled processes in a collaborative way

Recommended