Oracle EBS breach confirmed by Barts Health NHS

Major UK healthcare provider Barts Health NHS Trust has disclosed having its data stolen in the widespread Oracle E-Business Suite hack in August, nearly a month after the Clop ransomware operation exposed 241 GB of NHS data on its leak site, HackRead reports.

Infiltration of Barts' Oracle EBS system allowed the theft of patients' names and addresses, suppliers' payment details, and former staff records, as well as files related to accounting services offered to Barking Havering and Redbridge University Hospitals NHS Trust since April 2024, according to Barts, which emphasized that its clinical systems and other patient records were spared by the intrusion.

NHS England, the National Cyber Security Centre, and other UK regulators have already been informed about the incident, which has also prompted Barts to seek a High Court order to prohibit the data's circulation. Such a development comes after NHS providers were targeed by the INC ransomware-as-a-service operation and Qilin ransomware gang.