REF: 2016-367
Subject: Ransomware
Request:
- The number of times the hospital(s)/organisation has faced a ransomware attack, including attacks that were ultimately unsuccessful, since January 2012 to the date of this request. By ultimately unsuccessful, I mean that an email containing ransomware could have been sent to the department, but it did not lead to an infection of the target computer. Please break down this data annually.
- The number of times the hospital(s)/organisation has successfully been infected with ransomware since January 2012 to the date of this request.
- The number of times the hospital(s)/organisation paid the attackers since January 2012 to the date of this request.
- The amount of money the hospital(s)/organisation has paid attackers since January 2012 to the date of this request. Please break down how much was paid annually.
- Any emails sent or received by the hospital(s)/organisation discussing ransomware attacks.
- Any internal reports generated in preparation of, or as a result of, a ransomware attack from January 2012 to the date of this request.
Response:
| Section 21 – information already reasonably accessible
This exemption applies if the information requested is already accessible to the requester. You could apply this if you know that the requester already has the information, or if it is already in the public domain.
Please follow the link to our website: |