NHS Scotland Websites Directing Users to Adult and Illegal Sports Content

Key Takeaways

NHS Greater Glasgow and Clyde is investigating a compromised GP practice website linked to illegal content.
Cybersecurity experts warn that this incident may indicate broader vulnerabilities within NHS Scotland’s systems.
The compromised website was independently managed, with no evidence of a breach in primary NHS systems or data exposure.

Incident Overview

NHS Greater Glasgow and Clyde’s cybersecurity team is collaborating with a GP practice after its website was found linked to adult content and illegal sports streams. The website of The New Surgery in Kilmacolm has appeared on Google with several illicit content links. Nick Hatter, a former cybersecurity engineer, raised the alarm about this situation, suggesting it might be due to a Domain Name System (DNS) attack or a compromised WordPress setup.

A spokesperson from NHS Greater Glasgow and Clyde confirmed that their cyber security team is working with the Cyber Centre of Excellence at Public Services Delivery Scotland to address the matter. They clarified that the issue concerns a legacy website managed independently by the GP practice and reassured the public that there is no evidence of any compromise to the primary practice website or any NHS Scotland systems at local or national levels.

The NHS Scotland Cyber Centre of Excellence is investigating the issue to determine its cause and ensure containment. Scott Barnett, chief information security officer at Public Services Delivery Scotland, stated that there has been no discovery of exposure of personal or sensitive data due to this incident.

Hatter, who noticed the issue first, indicated that the scot.nhs.uk domain is now controlled by a US-based web developer, utilizing the site for illicit activities. He also highlighted that similar compromises have affected domains associated with Lerwick GP Practice and Levenwick Medical Practice in the Shetland Isles.

In a communication to Digital Health News, Hatter expressed concern about the potential for attackers to change the compromised URLs to redirect to phishing websites, emphasizing the risk given their association with the scot.nhs.uk domain, which adds an element of credibility. He warned that many more NHS Scotland practices might be vulnerable due to potentially using similar WordPress setups.

Cybersecurity expert Dr. Saif Abed, co-founder and director at The AbedGraham Group, remarked that while this issue seems isolated, it could reveal deeper vulnerabilities in NHS Scotland’s systems that warrant thorough investigation. He pointed out that the growing digital footprint of the NHS, coupled with outdated systems and interoperability challenges, creates opportunities for larger-scale attacks that could jeopardize public health and national security.

The content above is a summary. For more details, see the source article.