Courts / Ireland / Report

Confidential HSE data downloaded from security site, High Court hears

Summary

In a High Court hearing on 25 June 2021, Mr Justice Tony O'Connor considered the HSE's claim that confidential patient data stolen in a cyber‑attack was downloaded 23 times from the malware‑analysis service VirusTotal, run by Chronicle Security Ireland Ltd and its US parent Chronicle LLC, a Google‑owned firm. The HSE said the 27 stolen files were uploaded to VirusTotal in late May, deleted on 25 May, but had already been downloaded by 23 subscribers. The HSE seeks a Norwich Pharmacal order compelling the two companies to disclose the identities of those who uploaded or downloaded the material, including email addresses, phone numbers, IP addresses or physical addresses. The HSE obtained a High Court order on 20 May restraining any sharing, processing, selling or publishing of the stolen data.

Who, what, where, when and why

What: Report matter: Confidential HSE data downloaded from security site, High Court hears. Procedural stage: hearing_or_decision

When:

• May 25th Hearing Or Sentence
• May 20th Incident
• 2021-06-25 Publication

Why: However, the HSE was informed that arising out of data protection concerns the defendants require a court order in order to comply with the request to deliver up the information sought, Mr Ryan added. CNI source report

Places mentioned

Topics

Stage Hearing Or Decision Theft

Read the original CNI report