A retrospective impact analysis of the WannaCry cyberattack on the NHS
A retrospective impact analysis of the WannaCry cyberattack on the NHS
复制标题
DOI：
10.1038/s41746-019-0161-6
复制
发表时间：
2019-10-02
影响因子：
15.2
通讯作者：
Aylin, P.
中科院分区：
文献类型：
--
作者：
Ghafur, S.;Kristensen, S.;Aylin, P.
对医院流行病统计数据（HES）进行了系统分析，以确定2017年WannaCry攻击对国民健康服务（NHS）的影响，方法是确定因勒索软件攻击而错过的预约，死亡和财政成本。测量的主要结果是：门诊预约取消，选择和急诊入院，事故和急诊（A&E）就诊率，以及A&E死亡。与基线相比，在WannaCry攻击的一周内，所有信任的总活动没有显著差异。与基线相比，在WannaCry周期间，信托公司每天的急诊入院率增加了1%，A&E就诊率减少了1%。然而，直接感染勒索软件的医院的急诊和择期入院人数明显减少：每家感染医院每天的总入院人数减少约6%，急诊入院人数减少4%，择期入院人数减少9%。未观察到死亡率差异。在此期间，受感染的信托基金活动减少的总经济价值为5.9磅，其中包括4磅的住院费用损失，0.6磅的A&E活动损失，以及1.3磅的门诊预约取消。在感染WannaCry勒索软件的医院中，就诊和入院人数显着减少，相当于损失了5.9磅。没有报告死亡率增加，尽管这是对患者伤害的粗略衡量。需要进一步的工作来评估网络攻击或IT故障对医疗服务和患者安全的影响。
A systematic analysis of Hospital Episodes Statistics (HES) data was done to determine the effects of the 2017 WannaCry attack on the National Health Service (NHS) by identifying the missed appointments, deaths, and fiscal costs attributable to the ransomware attack. The main outcomes measured were: outpatient appointments cancelled, elective and emergency admissions to hospitals, accident and emergency (A&E) attendances, and deaths in A&E. Compared with the baseline, there was no significant difference in the total activity across all trusts during the week of the WannaCry attack. Trusts had 1% more emergency admissions and 1% fewer A&E attendances per day during the WannaCry week compared with baseline. Hospitals directly infected with the ransomware, however, had significantly fewer emergency and elective admissions: a decrease of about 6% in total admissions per infected hospital per day was observed, with 4% fewer emergency admissions and 9% fewer elective admissions. No difference in mortality was noted. The total economic value of the lower activity at the infected trusts during this time was 5.9 pound m including 4 pound m in lost inpatient admissions, 0.6 pound m from lost A&E activity, and 1.3 pound m from cancelled outpatient appointments. Among hospitals infected with WannaCry ransomware, there was a significant decrease in the number of attendances and admissions, which corresponded to 5.9 pound m in lost hospital activity. There was no increase in mortality reported, though this is a crude measure of patient harm. Further work is needed to appreciate the impact of a cyberattack or IT failure on care delivery and patient safety.