Barts Health NHS Trust, one of the largest trusts in the UK has been breached by the AlphaV / BlackCat ransomware gang.

The trust manages 5 hospitals in London including St Barts, The Royal London, Mile End, Whipps Cross, and Newham hospitals, and deals with over 2.5 million patients annually.

Barts Health main web page

UK biggest NHS leak

The gang say that they have taken approximately 7Tb of data, which if correct makes it the largest data breach from a UK health service.

AlphaV leak site showing stolen data from Barth Health Trust

Data stolen by the gang includes Internal company data (including staff C.V.’s, Driving licence details, Financial data, and National Insurance data.) It is not known if any patient data is included in the breach.

No encryption deployed

In an unusual event, it appears that there was no attempt to encrypt the data on the affected systems, rather it is a simple case of data exfiltration & extortion in this attack.

A spokesperson for the Barts Health said on Friday, “We are aware of claims of a ransomware attack and are urgently investigating.”