Gloucestershire Health and Care- NHS Trust logo
with you, for you
Responses > FOI 287-2024

Freedom of Information request FOI 287-2024

Response published: 11 February 2025

FOI Request

I would like to request under the Freedom of Information Act details on ransomware attacks on your organisation between 2019 and 2024. For the avoidance of doubt, a ransomware attack is a type of cyberattack which prevents an organisation accessing their own files or computer networks after criminals manage to infect the system with malware. These type of attacks involve the criminals demanding payment for a key to restore access to the files. In particular, I would like to know the number of ransomware attacks on your organisation between 2019 and 2024. I would like to know the number of successful attacks on your system. I would also like to know the cost of these attacks on your organisation, including the amount of ransom or payments made to restore access to your systems. I would appreciate it if you could break down the figures for each year. I would also appreciate it if you could supply the data on an excel spreadsheet or other type of .CSV file.

FOI Response

Freedom of Information Request – Ref: 287-2024

Thank you for your recent Freedom of Information request. Please find our response below.

You asked:

1. I would like to know the number of ransomware attacks on your organisation between 2019 and 2024.

2. I would like to know the number of successful attacks on your system.

3. I would also like to know the cost of these attacks on your organisation, including the amount of ransom or payments made to restore access to your systems.

4. I would appreciate it if you could break down the figures for each year.

Our response:

We have not answered these questions applying the section 24 (1) exemption and 24(2) of neither confirm nor deny caveat.

Next steps:

Should you have any queries in relation to our response, please do not hesitate to contact us. If you are unhappy with the response you have received in relation to your request and wish to ask us to review our response, you should write to:

Louise Moss
Head of Legal Services / Associate Director of Corporate Governance
c/o Gloucestershire Health and Care NHS Foundation Trust
Edward Jenner Court
1010 Pioneer Avenue
Gloucester Business Park
Brockworth, GL3 4AW
E-mail: louise.moss@ghc.nhs.uk

If you are not content with the outcome of any review, you may apply directly to the Information Commissioner’s Office (ICO) for further advice/guidance. Generally, the ICO will not consider your case unless you have exhausted your enquiries with the Trust which should include considering the use of the Trust’s formal complaints procedure. The ICO can be contacted at: The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.