Oireachtas Joint and Select Committees
Thursday, 9 February 2023
Public Accounts Committee
2021 Report of the Comptroller and Auditor General and Appropriation Accounts
Vote 38 - Health
Chapter 12 - Financial Impact of Cyber Security Attack
9:30 am
Mr. Fran Thompson:
I can give a breakdown of that. Infrastructure costs were about €3 million. There were revenue and capital pieces, so €23 million was revenue and €13 million was capital. Most of the capital was on infrastructure. On the breakdown of the costs, there would have been vendor support and partner support. We would have also improved our cybersecurity.
To answer the earlier question, the implication of the cyberattack for the HSE was around our ability to deliver all of the IT services we have across the totality of the organisation - community care, hospital care and on the corporate side of things. That impacted a number of the voluntary hospitals as well because we provide systems to them, for example, the likes of BloodTrack, the national integrated medical imaging system, NIMIS, renal care or cancer care. For people on the ground, the impact was significant because they had no access to any of the IT systems that were available and had to return fully to manual records.
The other impact was on the integration of services between general practice and acute hospitals. We would provide things like the e-referrals programme, which would allow automatic referrals to go in, the integration of messages, which would allow GPs to order and receive messages from laboratories, and radiology on services.