Prime Highlights:
- NHS Scotland has invested £3 million in a new cybersecurity system to protect against ransomware attacks.
- The Halcyon system will help prevent future data breaches like the 2024 incident affecting NHS Dumfries and Galloway.
Key Facts:
- The £3.1 million contract, including VAT, was signed with IT reseller Computacenter to supply Halcyon’s security software.
- The system will be rolled out across all 14 NHS boards in Scotland to strengthen national cyber defences.
Background:
NHS Scotland has made a major move to strengthen its cybersecurity defences by investing more than £3 million in a new artificial intelligence (AI)-powered system designed to prevent ransomware attacks. The health service has partnered with IT reseller Computacenter, which will provide specialist cybersecurity software from Halcyon, under a £3.1 million contract inclusive of VAT.
The decision follows a serious cyber incident in 2024 that compromised personal data belonging to tens of thousands of Scots. In that breach, the NHS Dumfries and Galloway health board was targeted, prompting warnings for around 150,000 citizens to remain alert to potential extortion attempts. The new investment aims to ensure such incidents are mitigated in the future.
According to a newly released commercial notice, the Halcyon platform will be deployed across all 14 NHS boards in Scotland, complementing the existing suite of cybersecurity tools managed by the NHS Cyber Centre of Excellence. These tools currently help reduce the risk and impact of cyberattacks, but officials say ransomware still poses a major threat as it keeps evolving.
The Halcyon system stops ransomware before it can cause damage or steal data. It is lightweight and can run easily on existing NHS devices, making it a strong addition to Scotland’s cybersecurity setup.
In a statement, NHS Scotland said the AI-powered system will “significantly strengthen our defence-in-depth suite of tools” and provide enhanced protection against unauthorised access and data theft.
Halcyon, the cybersecurity company behind the technology, emphasises that its software is purpose-built to tackle ransomware specifically, rather than serving as a general security solution. The firm claims its system’s targeted design allows it to detect and stop ransomware activity before any encryption or data exfiltration occurs.
The move shows NHS Scotland’s strong commitment to using modern technology to keep patient data safe and maintain public trust in digital healthcare.
