Summary

  • A cyber-attack on the NHS is affecting hospitals and GP surgeries across England and in Scotland

  • Ransomware software that locks computers, demanding payment, is being seen on screens

  • Theresa May says the NHS incident is part of a wider cyber-attack affecting organisations around the world

  • Similar infections are reported by Spanish utility firms, and in the US, China, Russia, Italy, Vietnam and Taiwan

  • Up to 28 NHS organisations in England are said to have been affected, as well as five GP surgeries in Scotland

  • GPs reported to be using pen and paper in some areas

  • Some hospitals are diverting patients

  1. GCHQ criticised for limerick tweetpublished at 16:55 British Summer Time 12 May 2017

    GCHQ, the electronic surveillance agency, has been criticised on social media for a poorly-timed tweet which was sent as the cyber-attack unfolded.

    This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser.View original content on Twitter
    The BBC is not responsible for the content of external sites.
    Skip twitter post

    Allow Twitter content?

    This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’.

    The BBC is not responsible for the content of external sites.
    End of twitter post
    This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser.View original content on Twitter
    The BBC is not responsible for the content of external sites.
    Skip twitter post 2

    Allow Twitter content?

    This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’.

    The BBC is not responsible for the content of external sites.
    End of twitter post 2
    This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser.View original content on Twitter
    The BBC is not responsible for the content of external sites.
    Skip twitter post 3

    Allow Twitter content?

    This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’.

    The BBC is not responsible for the content of external sites.
    End of twitter post 3
  2. Lincolnshire hospitals 'will divert some emergencies'published at 16:54 British Summer Time 12 May 2017

    United Lincolnshire Hospitals Trust says all of its computer systems and many phone lines are switched off. 

    Where possible, the trust will be diverting some emergency cases to local hospitals which are not affected.

    The trust says:"We ask patients to only come to our A&Es if absolutely necessary. 

    "We do not yet know how long this incident will last, and therefore are cancelling all outpatient, endoscopy, cardiology and radiology appointments scheduled for this weekend." 

  3. "Email shut down - just to be safe"published at 16:52 British Summer Time 12 May 2017

    Dr Qassid in Kettering emailed the BBC to say that the email system in Kettering General Hospital was shut down as a precaution.

    He added: "I hope this attack doesn't lead to any breaches of confidentially of our patient records."

  4. Contingency plans in east Londonpublished at 16:50 British Summer Time 12 May 2017

    We're diverting patients from Royal London to Queens, Romford. Our trauma patients are also being diverted elsewhere. All phones at Newham hospital are down. 50% of phones at Whipps Cross are down. All elective operations today and tomorrow are cancelled. Pathology labs also severely affected so we can't get patient blood test results

  5. Hopital advises against non-emergency A&E visitspublished at 16:46 British Summer Time 12 May 2017

    This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser.View original content on Twitter
    The BBC is not responsible for the content of external sites.
    Skip twitter post

    Allow Twitter content?

    This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’.

    The BBC is not responsible for the content of external sites.
    End of twitter post
    This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser.View original content on Twitter
    The BBC is not responsible for the content of external sites.
    Skip twitter post 2

    Allow Twitter content?

    This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’.

    The BBC is not responsible for the content of external sites.
    End of twitter post 2
  6. Cyber attack: Your Storiespublished at 16:46 British Summer Time 12 May 2017

    An anonymous hospital worker told the BBC: 

    "The cyber-attacks have really left our team in a bit of a rut, can't access our internet or use our emails. Have had to put work on hold as I can't do anything. Not really what the NHS needs right now!"

  7. UK's National Cyber Security Centre looking into attackpublished at 16:45 British Summer Time 12 May 2017

    The National Cyber Security Centre tweets...

    This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser.View original content on Twitter
    The BBC is not responsible for the content of external sites.
    Skip twitter post

    Allow Twitter content?

    This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’.

    The BBC is not responsible for the content of external sites.
    End of twitter post
  8. Colchester A&E advises patients to only arrive for emergenciespublished at 16:45 British Summer Time 12 May 2017

    Colchester General Hospital in Essex is asking patients not to come to its accident and emergency department and is postponing all non-urgent procedures for the rest of the day.

    It's due to the cyber-attack on NHS IT systems across the UK.

    Colchester is still open for 999 emergencies.

    Sorry, we're having trouble displaying this content.View original content on Facebook
    The BBC is not responsible for the content of external sites. Facebook content may contain adverts.
  9. More hospital trusts confirm they are not affectedpublished at 16:44 British Summer Time 12 May 2017

    NHS Kernow CCG, Royal Cornwall Hospitals Trust and Cornwall Partnership Trust all say they are not affected by the cyber-attack.

    North Tees and South Tees NHS Trusts, CCG in Hartlepool and Stockton also say they are unaffected.  

  10. NHS computers hit by 'cyber attack'published at 16:37 British Summer Time 12 May 2017

    NHS Blackpool Clinical Commissioning Group have said patients should avoid contacting GPs or using hospital services "unless absolutely necessary", while staff deal with the effects of a cyber attack.

    This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser.View original content on Twitter
    The BBC is not responsible for the content of external sites.
    Skip twitter post

    Allow Twitter content?

    This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’.

    The BBC is not responsible for the content of external sites.
    End of twitter post
  11. 'Cyber-attack not the first but largest so far'published at 16:35 British Summer Time 12 May 2017

    The Patients Association says the attack appears to have been "highly co-ordinated and aggressive".

    "A police investigation will no doubt be required," it adds.

    "Though today's may be the largest attack of this sort, it is not the first - yet the lessons from earlier incidents have not been learnt."

  12. Staff warned against using social mediapublished at 16:34 British Summer Time 12 May 2017

    A member of staff at the Royal London Hospital, who did not wish to be named, has said staff have been warned not to use social media.

  13. 'Friend's operation cancelled'published at 16:29 British Summer Time 12 May 2017

    People have been reacting on Twitter to news of the cyber-attack.

    TweetImage source, @AmyGrimmers
  14. Attack 'was not targeted at the NHS'published at 16:28 British Summer Time 12 May 2017

    Simon Enright, director of communications for NHS England, tweets...

    This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser.View original content on Twitter
    The BBC is not responsible for the content of external sites.
    Skip twitter post

    Allow Twitter content?

    This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’.

    The BBC is not responsible for the content of external sites.
    End of twitter post
    This Twitter post cannot be displayed in your browser. Please enable Javascript or try a different browser.View original content on Twitter
    The BBC is not responsible for the content of external sites.
    Skip twitter post 2

    Allow Twitter content?

    This article contains content provided by Twitter. We ask for your permission before anything is loaded, as they may be using cookies and other technologies. You may want to read Twitter’s cookie policy, external and privacy policy, external before accepting. To view this content choose ‘accept and continue’.

    The BBC is not responsible for the content of external sites.
    End of twitter post 2
  15. Oxford hospitals 'on alert'published at 16:27 British Summer Time 12 May 2017

    A spokesman for the Oxford University Hospitals Trust said they have been notified about the cyber attacks and are "on alert".

    "So far, our strong security measures are holding solid. We continue to closely monitor the situation and have asked staff to be vigilant. Protecting patient information is our top priority. 

    "We understand that NHS Digital has set up a dedicated incident line, and suppliers are working to find solutions to this ransomware outbreak." 

  16. Herefordshire and Worcestershire unaffectedpublished at 16:27 British Summer Time 12 May 2017

    NHS trusts in Herefordshire and Worcestershire have not been affected by the attack, the NHS Clinical Support Unit has confirmed.

    It said doctors' surgeries should continue to run as normal but advises all areas of the NHS to proceed with caution. 

  17. NHS Digital: 'No evidence patient data has been accessed'published at 16:24 British Summer Time 12 May 2017

    More from that NHS statement:

    "A number of NHS organisations have reported to NHS Digital that they have been affected by a ransomware attack which is affecting a number of different organisations.

    "The investigation is at an early stage but we believe the malware variant is Wanna Decryptor.

    "At this stage we do not have any evidence that patient data has been accessed. 

    "We will continue to work with affected organisations to confirm this.

    "NHS Digital is working closely with the National Cyber Security Centre, the Department of Health and NHS England to support affected organisations and to recommend appropriate mitigations.

    "This attack was not specifically targeted at the NHS and is affecting organisations from across a range of sectors.

    "Our focus is on supporting organisations to manage the incident swiftly and decisively, but we will continue to communicate with NHS colleagues and will share more information as it becomes available."

  18. Attack 'could be ransomware'published at 16:22 British Summer Time 12 May 2017

    Chris Baraniuk
    Technology reporter

    Software that locks a computer and demands payment before allowing access again - ransomware - is one of the world's biggest growing cyber threats. 

    It certainly looks like that is what has hit the NHS in this case - and one IT firm says eleven of its NHS customers, external have been affected. 

    Screenshots shared online, external, purportedly from NHS staff, show a program demanding $300 (£230) in Bitcoin that looks similar to ransomware known as WannaCryptor or WCry, external

    There's no indication of who is behind the attack yet, nor do we know exactly how it infected NHS systems. But hospitals have been targeted with similar software before - it struck three US hospitals last year.

  19. How widespread is the disruption?published at 16:21 British Summer Time 12 May 2017

    NHS Digital has just issued a statement saying that 16 organisations from across the NHS have reported that their IT systems have been affected.

  20. Screenshot of NHS staff screenspublished at 16:18 British Summer Time 12 May 2017

    Staff have told the BBC they saw this image appear on their screens when issues began happening.

    Screenshot of computers in NHS trust attack