Queensland Health has blocked staff from accessing personal email accounts due to concerns about high-threat hacking. Four days ago, the Australian Cyber Security Centre published a warning that the EMOTET malware was targeting businesses and individuals through the sending of email attachments or website links.
When clicked or opened, the malware allows hackers to take control of computers or access devices. A Queensland Health spokesperson said the department’s priority was “the safety and privacy of patients and our cybersecurity teams are not aware of any incidents involving Queensland Health.”.
“Precautionary measures are in place and recommended protocols are being followed and will remain in place until the threat is reduced,” the spokesperson said. “Queensland Health Government security teams continue to monitor our systems for any potential impact related to this incident.”.
The ACSC issued a warning on Thursday, recommending that government agencies notify staff about the software virus, maintain firewalls and develop an “incident response plan.”
It follows a ransomware attack on a group of regional hospitals this month that forced surgical delays and raised concerns about patient safety
Barwon Health hospital staff were forced to disconnect information systems due to the virus quarantine and doctors were unable to access patients' clinical records, forcing them to suspend surgeries.
AAP reported that the attack had come from a phishing email sent to an employee, according to the government.
Queensland Health's IT division, eHealth Queensland, sent out an email on Thursday warning staff they would not be able to access personal and non-company email accounts such as Hotmail, Gmail or Yahoo, while the threat of hacking was high.
“eHealth Queensland has implemented a temporary block on all personal and non-corporate email accounts as a precautionary measure,” the email from eHealth Queensland CEO Damian Green said.
"This will help protect Queensland Health's network and systems from malicious threats. This block will remain in place until the threat is mitigated.".
The email stated that neither the department nor the hospital and health services had been affected by the malware and the department was “prepared to respond should this situation change.”
Staff were reminded not to open suspicious emails or attachments, not to attempt to contact the sender by email or other means, and to report any suspected phishing attempts.
