Faul Clare, Robinson Jacqueline, Carey Jennifer, McArdle Orla, Ryan Laoise, Woods Ruth, McClean Brendan
St. Luke's Radiation Oncology Network, Dublin, Ireland.
Adv Radiat Oncol. 2022 Sep 16;7(5):100993. doi: 10.1016/j.adro.2022.100993. eCollection 2022 Sep-Oct.
On May 14, 2021, the Health Service Executive (HSE) of Ireland experienced a major ransomware cyberattack. The HSE initially took down all of its information technology systems to protect its core systems. All Internet connections within the HSE were unavailable from 7 am for approximetely three weeks which had a major effect on the radiation oncology service nationally within the public service. St. Luke's Radiation Oncology Network (SLRON) is a complex, 3-center radiation oncology service, and it is the largest in the country; with 14 linear accelerators, it is one of the largest radiation centers in Europe. This article details the response of SLRON to the outage resultant from the cyberattack. Although the outage affected all patient services, including laboratory, diagnostic imaging, and inpatient care, the article primarily focuses on our response to get the radiation oncology service restarted as quickly as possible and details the steps we took to reinstate our systems safely, how we prioritized patient treatments, and how we communicated with patients, staff, and the public without having access to standard communication pathways. All decisions were risk assessed and were made with the best resources available to us at the time to maximize the outcome for our patients and mitigate significant delays. The risk remains ongoing, and the onerous task of uploading backlogs and reconciling patient records is a continuing risk.
2021年5月14日,爱尔兰卫生服务局(HSE)遭遇了一次重大的勒索软件网络攻击。HSE最初关闭了其所有信息技术系统以保护其核心系统。从上午7点起,HSE内部的所有互联网连接中断了约三周,这对公共服务体系内全国范围的放射肿瘤服务产生了重大影响。圣卢克放射肿瘤网络(SLRON)是一个复杂的、由三个中心组成的放射肿瘤服务机构,是该国最大的此类机构;它拥有14台直线加速器,是欧洲最大的放射中心之一。本文详细介绍了SLRON对网络攻击导致的服务中断所做出的应对措施。尽管此次中断影响了所有患者服务,包括实验室、诊断成像和住院护理,但本文主要关注我们为尽快重启放射肿瘤服务所做的应对,详细说明我们为安全恢复系统所采取的步骤、我们如何对患者治疗进行优先级排序,以及在无法使用标准通信途径的情况下我们如何与患者、工作人员和公众进行沟通。所有决策都经过了风险评估,并且是在当时我们所能获取的最佳资源的基础上做出的,以最大化患者的治疗效果并减少重大延误。风险仍在持续,上传积压工作和核对患者记录这项艰巨任务仍是一个持续存在的风险。