cyber attack Archives - ProtectionWeb

Over 100 000 cyber-attacks while SAPS records just 544 cases

Guy Martin — Fri, 19 Sep 2025 07:21:18 +0000

Over 100 000 banking breaches in 2024 caused R1.8 billion in losses, yet the South African Police Service (SAPS) recorded only 544 cases.

This is according to the Democratic Alliance (DA), which said it has consequently tabled a Private Members Bill establishing a new Chapter 9 Institution in the form of the Office of the Cyber Commissioner.

While the response from the private sector and academia was overwhelmingly positive, the Bill’s reception in government and the public sector was predictably less positive, said Advocate Glynnis Breytenbach, DA Spokesperson on Justice and Constitutional Development.

Nevertheless, as the cyber-attacks on the country and our institutions increase daily, and the costs attached thereto continue to escalate, it remains a piece of legislation that requires serious consideration, Breytenbach said.

It appears from police statistics that they have only 544 cyber related fraud cases on their register, yet in excess of 100 000 cyber-attacks on banking accounts occurred in the 2024 year, according the SABRIC. This represents a loss of around R1.8 billion to individuals and represents an 86% increase in such attacks from the previous year.

“Clearly, there is a distinct problem in the fact that the SAPS have so few matters under investigation while the actual attacks have almost doubled. This again underlines the fact that we are in no position to deal effectively with the risk of cybercrime in South Africa. Our country is targeted precisely because of our inadequate structures set up to deal with this issue,” Breytenbach continued.

“The SAPS are underfunded, under-resourced and under trained. The Information Regulator is not adequately resourced nor equipped to deal with all these occurrences, and cyber criminals are having a field day.

“It is clear that some proactive steps must be taken urgently to revisit this issue, and we will continue to press ahead with this piece of legislation, designed to deal with cyber-crime, cyber-attacks and protocols in a more pro-active fashion,” Breytenbach concluded.

The post Over 100 000 cyber-attacks while SAPS records just 544 cases appeared first on ProtectionWeb.

DDoS attacks continue to dominate the digital battlefield, destabilising critical infrastructure

Guy Martin — Fri, 19 Sep 2025 07:20:27 +0000

Distributed Denial-of-Service (DDoS) attacks have evolved into precision-guided weapons of geopolitical influence capable of destabilising critical infrastructure, Netscout Systems has said in a new report that tracked over 8 million DDoS attacks in the first half of 2025.

Of the 8 million attacks, 3.2 million were monitored in Europe, the Middle East and Africa (EMEA). Hacktivist groups like NoName057(16) orchestrated hundreds of coordinated strikes each month, targeting the communications, transportation, energy, and defence sectors. DDoS-for-hire services have democratised attack tools, enabling novice actors to execute sophisticated attack campaigns. AI-enhanced automation, multi-vector attacks, and carpet bombing techniques challenge traditional defences. Botnets compromised tens of thousands of IoT devices, servers, and routers, delivering sustained attacks and causing significant disruption.

While each of these elements is dangerous on its own, in aggregate, they have formed the perfect storm, creating unprecedented cyber risk for organisations and service provider networks around the world, Netscout said.

The company observed more than 50 attacks greater than a terabit-per-second (Tbps) and multiple gigapacket-per-second (Gpps) attacks in the first half of 2025, including a 3.12 Tbps attack in the Netherlands and a 1.5 Gpps attack in the United States.

The India-Pakistan conflict saw hacktivist groups target the Indian government and financial sectors in May, while the Iran-Israel conflict generated more than 15,000 attacks against Iran and 279 against Israel in June.

More than 880 bot-driven DDoS attacks occurred daily in March, peaking at 1,600 incidents, with attack durations increasing to an average of 18 minutes.

Leveraging DDoS-for-hire infrastructure, DieNet orchestrated over 60 attacks since March, while Keymous+ launched 73 attacks across 28 industry sectors in 23 countries.

NoName057(16) maintained dominance, claiming more than 475 attacks in March alone, 337% more than the next most active group. The hacktivist group targeted government websites in Spain, Taiwan, and Ukraine.

“As hacktivist groups leverage more automation, shared infrastructure, and evolving tactics, organizations must recognize that traditional defences are no longer sufficient,” stated Richard Hummel, director, threat intelligence, Netscout. “The integration of AI assistants and the use of large language models (LLMs), such as WormGPT and FraudGPT, escalates that concern. And, while the recent takedown of NoName057(16) was successful in temporarily reducing the group’s DDoS botnet activities, preventing a future return to the top DDoS hacktivist threat is not guaranteed. Organisations need intelligence-driven, proven DDoS defences that can deal with the sophisticated attacks we see today.”

The post DDoS attacks continue to dominate the digital battlefield, destabilising critical infrastructure appeared first on ProtectionWeb.

A targeted attack mimics communication from company CEO to steal funds

Ricardo Teixeira — Mon, 09 Jun 2025 09:38:55 +0000

Over the last few weeks, Kaspersky detected a series of sophisticated attack attempts aimed at deceiving an organisation’s finance team into paying fraudulent invoices. Emails mimicking correspondence between the organisation’s CEO and contractor companies were sent to the organisation’s finance department to persuade them into paying urgent “invoices” for alleged “consulting services”. These attack attempts highlight a disturbing trend of targeted schemes leveraging forged executive identities to exploit corporate trust.

The analysed attack attempts were examples of business email compromise (BEC) attacks. As a rule, such attacks are made on behalf of a management representative of a compromised firm. Importantly, in all analysed cases the senders were fake – the real addresses from where the emails came had nothing in common with the displayed sender names. These tricks were used to persuade the victims that the emails were legitimate.

Some incidents involved emails that imitated correspondence between the company’s CEO and an alleged contractor law firm, urging the financial department to pay the attached fake invoice. The fake correspondence with the CEO of a victim company was used as “proof” that the request for payment was legitimate. In this attack the name of the fictional partner company was indicated only in the name of the sender field, and a real email address was different and changed from email to email.

Other incidents featured similar emails that mimicked communications between the CEO and contractor companies to request urgent payment for a fake invoice, but this time the invoice itself was not attached.

“This attack stands out for its meticulous attention to detail and exploitation of trusted relationships. By fabricating convincing email threads and impersonating high-level executives, attackers are banking on employees’ reluctance to question seemingly authentic requests. Companies must prioritise employee training and robust email verification systems to counter these evolving threats,” commented Anna Lazaricheva, spam analyst at Kaspersky.

In order to avoid becoming a victim of fraudulent messages and specifically business email compromise attacks, Kaspersky experts advise the following:

Check the sender’s email address and do not rely on the displayed name of the sender, as actual email addresses may have nothing in common with the companies and people who are displayed to have sent the email.
Only open emails and click links if you are sure you can trust the sender; make sure that the sender’s address is legitimate.
When a sender is legitimate, but the content of the message seems strange, it is worth checking with the sender via an alternative means of communication.
Check the spelling of a website’s URL if you suspect you are faced with a phishing page. The URL may contain mistakes that are hard to spot at first glance, such as a 1 instead of I or 0 instead of O.
Use a proven cybersecurity solution such as Kaspersky Next and Kaspersky Premium when surfing the web.

The post A targeted attack mimics communication from company CEO to steal funds appeared first on ProtectionWeb.

South African Airways hit by major cyber attack

Guy Martin — Thu, 08 May 2025 07:01:26 +0000

South African Airways (SAA) has confirmed that it experienced a significant cyber incident starting on Saturday, 3 May, which temporarily disrupted access to its website, mobile app, and several internal operational systems.

Upon detecting the breach, SAA immediately activated its disaster management and business continuity protocols. These swift measures contained the incident effectively, minimising disruption to core flight operations and ensuring that essential customer service channels, including contact centres and sales offices, remained operational. Normal system functionality was restored later the same day, SAA said in a statement.

SAA management launched a thorough investigation with independent digital forensic experts to determine the root cause and full scope of the incident, including the possibility of external cybercrime involvement. As a National Key Point, SAA has reported the incident to the State Security Agency (SSA), South African Police Service (SAPS), and notified the Information Regulator of South Africa under the Protection of Personal Information Act (POPIA).

The preliminary investigation is ongoing to assess whether any data was accessed or exfiltrated. SAA has committed to notifying any affected parties directly, in line with regulatory requirements, should a data breach be confirmed, the airline said.

“The security and integrity of our business systems and the protection of the consumer data entrusted to us remain our highest priority. In response to the cyber incident that began on May 3rd, we acted swiftly to contain the disruption, restore services, and initiate a comprehensive investigation. Our robust business continuity measures ensured operational stability, particularly for our valued customers. I want to assure all stakeholders, including our partners, customers, and dedicated employees, that we are taking every necessary step to determine the root cause of this incident, strengthen our security framework, and mitigate any potential risks. SAA remains committed to delivering safe, reliable, and resilient service,” said Prof John Lamola, Group CEO of SAA.

Over the past several years, South African government entities have faced a surge in cyberattacks, particularly ransomware, targeting critical infrastructure and disrupting key services. Notable incidents include the crippling of the Department of Justice and Constitutional Development’s IT systems in September 2021, a ransomware attack on Transnet in July 2021 that brought port operations to a near standstill, and repeated disruptions at the South African Post Office and South African National Space Agency.

More recently, the South African Weather Service was taken offline by a ransomware group in January 2025, impacting weather reporting for aviation and marine sectors. These attacks, often linked to sophisticated international cybercrime groups, have exposed vulnerabilities in government systems, sometimes exacerbated by insider involvement, and have led to significant operational disruptions, data breaches, and financial losses.

South Africa now averages thousands of cyberattacks per week against government agencies, making it one of the continent’s most targeted countries, with ransomware and information disclosure among the most prevalent threats.

The post South African Airways hit by major cyber attack appeared first on ProtectionWeb.

Securing Africa’s manufacturing sector against cybercrime

Ricardo Teixeira — Tue, 11 Feb 2025 06:53:51 +0000

Connectivity and automation have undeniably revolutionised the manufacturing sector, boosting efficiency and productivity. However, they have also introduced significant vulnerabilities, leaving the industry increasingly exposed to cybersecurity threats.

In fact, recent insights from Datacentrix partner, Check Point revealed that manufacturing emerged as the most impacted by cyberattacks in the third quarter of 2024, with the sector experiencing 30 percent of all reported ransomware attacks globally over the period.

Another concerning statistic was the fact that – at a regional level – Africa bore the brunt of cyber threats over the timespan, with local organisations facing an average of 3,370 attacks per week – an alarming 90 percent increase from the previous year.

Cybercriminals are exploiting vulnerabilities within manufacturing supply chains, targeting not only the manufacturers themselves, but also suppliers, logistics providers and even critical infrastructure. This underscores the urgent need for robust, proactive cybersecurity measures within this sector.

Attacks in manufacturing can originate from many sources, including energy suppliers, logistics providers and shop floor equipment. Methods could include:

Ransomware: Disrupting supplier operations and production schedules, leading to delays and financial losses.
Phishing: Extracting sensitive information such as login credentials or financial data, which could be used to disrupt operations or steal intellectual property.
Distributed Denial of Service (DDoS) attacks: Overwhelming IT infrastructure and causing reputational damage.
Malware infiltration: Introducing compromised components or software into the supply chain, potentially disrupting operations or compromising safety.
Industrial espionage: Targeting manufacturing processes or intellectual property for competitive advantage or resale on the black market.

Building a secure framework for manufacturing

To address these challenges, global criteria such as the International Electrotechnical Commission’s (IEC) 62443 standards and the International Organization for Standardization’s (ISO) 27001 standard for information security management systems (ISMS)have been developed. These frameworks promote comprehensive cybersecurity practices across the manufacturing value chain, encompassing development, production and distribution.

ISO 27001 helps organisations identify and address risks holistically, integrating people, policies and technology into their security strategies. The IEC 62443 series, tailored for operational technology (OT), specifies security requirements suited to industrial automation and control systems, which differ from traditional IT environments.

Proactive cybersecurity measures

To strengthen cybersecurity and comply with the related standards, South African manufacturing organisations should begin with a comprehensive risk assessment to pinpoint vulnerabilities. Datacentrix recommends adopting advanced cybersecurity technologies for both OT and IT environments, alongside regular workforce training, including non-IT employees, on security best practices.

It’s also possible to perform offline cyber audits for new equipment, where shop floor equipment can be scanned at staging or pre-production planning and certified as virus, malware and configuration risk free at that time and place. Furthermore, PLC code protection offers advanced PLC versioning, code management, code backup and function block level deployment services. This removes IP from engineering workstations and puts code in secure locations that are easily backed up, restored and documented for compliance and audits.

Securing manufacturing’s future

Manufacturing plays a vital role in driving economic growth and innovation. To remain resilient against cyber threats, organisations within this industry must adopt a proactive and collaborative approach to cybersecurity. As a hybrid ICT systems integrator and managed services provider, Datacentrix is committed to equipping manufacturing businesses with the tools and expertise needed to strengthen their supply chains and safeguard their operations.

The post Securing Africa’s manufacturing sector against cybercrime appeared first on ProtectionWeb.

Cyber security survey paints bleak picture for South Africa

Guy Martin — Wed, 09 Oct 2024 09:32:55 +0000

Half of organisations in South Africa reported multiple cyber security incidents in the last year, and the majority suffered at least one security breach, according to a new survey by the Council for Scientific and Industrial Research (CSIR) Information and Cybersecurity Centre.

The CSIR in collaboration with the Cybersecurity Hub under the Department of Communication and Digital Technologies this week announced the release of four national cyber security surveys conducted at the end of the 2023/24 financial year. Over 300 responses were collected for each survey, resulting in a total of over 1200 individuals and organisations participating.

One of the key findings concerned the prevalence of cyber attacks: A significant 47% of organisations reported experiencing 1-5 cyber security incidents in the past year, underscoring the persistent threat landscape, the CSIR said.

A concerning 88% of participants admitted to suffering at least one security breach, with 90% of those organisations being targeted multiple times.

Malware and phishing attacks emerged as the most common cyber threats, with organisations reporting a high incidence of these attacks.

Only 32% of the respondents indicated that over half of their employees have received cyber security awareness training in the past year, indicating a serious gap in organisations’ seriousness in building cyber security awareness and culture.

A critical challenge identified by the surveys was the cyber security skills gap, with 63% of cyber security roles partially or fully unfilled. Retaining cyber security talent is another pressing issue, with 35% of professionals citing better offers, lack of training opportunities, and other factors as reasons for leaving their current positions.

Only 41% of the organisations are assessing and monitoring cyber threats on daily basis, indicating that majority of organisations are not prepared to deal with cyber threats which according to Telecom Review Africa, South Africa experiences almost over 20 million cyber security threats or attacks per month.

The CSIR found that financial institutions (88.0%) were considered the most important driver of the South African digital identity market. Over two-thirds mentioned both encryption and privacy technologies (71%) and biometrics (68%) as drivers, while half reported identity theft being a serious concern that can be addressed by digital identity.

Dr Jabu Mtsweni, Head of the CSIR Information and Cybersecurity Centre, emphasised the significance of these surveys, stating, “In today’s interconnected world, cyber security is a paramount concern. These national surveys provide a comprehensive assessment of our cyber security posture and highlight areas where we need to strengthen our defences as a country, and further they provide local and contextual research in this domain”.

Dr Kiru Pillay from the Cybersecurity Hub commented that while the integration of ICTs into daily life has greatly benefited society, increased digital connectivity also introduces significant risks, as cybercriminals exploit vulnerabilities in cyberspace. “Cyber security must therefore be prioritised as a strategic imperative across all aspects of governance and service delivery. Studies like these are crucial in helping us understand our current standing as a country and determine where we should focus our initiatives.”

Based on the survey findings, the CSIR recommends investing in cyber security infrastructure, education, and research; developing a skilled cyber security workforce; strengthening incident responses; improving digital identity; and fostering public-private partnerships.

The CSIR said it believes that by addressing these recommendations, South Africa can significantly improve its cyber security posture and protect its critical infrastructure and citizens from cyber threats.

The post Cyber security survey paints bleak picture for South Africa appeared first on ProtectionWeb.

Eight reasons why your business may get hacked

Ricardo Teixeira — Mon, 09 Sep 2024 10:19:30 +0000

No matter how big or small, any business can be a target for cyber attackers. While some business owners think they’re too small to be noticed, the numbers tell a different story. In 2023 alone, over 343 million people fell victim to cybercrimes, and it doesn’t look like it’s slowing down.

Any organisation, whether it’s in the private sector, public sector, or even a charity, can be hit by a cyberattack. Hackers don’t discriminate; they go after companies of all sizes. In fact, small businesses are targeted 43% of the time, but only 14% are ready to defend themselves.

“Understanding the commonalities between victims and knowing how hackers select their targets is crucial to developing strong cybersecurity defences,” says Warren Bonheim, Managing Director of Zinia, a leading IT technology group and Managed Services Provider.

“For most hackers, the main motivation behind their attacks is straightforward: money. That’s why they often use tactics like ransomware to blackmail their victims or phishing schemes to trick people into making fake payments. However, there are other reasons too.”

So, what makes your business a tempting target for hackers? Let’s break it down:

Money and Information

Most hackers are after one thing: money. They might target a business because of its financial worth or the valuable information it holds. “Personal data, like financial details and customer info, can be sold on the dark web,” says Bonheim. That’s why companies with a lot of customer data, like those in the financial services industry, are prime targets.

Corporate Espionage

Some hackers target businesses not just for money but for valuable information like trade secrets, intellectual property, or confidential plans. This stolen data can be sold to competitors or used to gain a market edge. Bonheim stresses that in some cases, hackers are even hired by rival companies to engage in corporate espionage, stealing product designs and strategic plans.

Weak Security

Hackers often go for businesses with weak cybersecurity. They know smaller and medium-sized companies may not have the best defences. They use tricks like pretending to be a trusted source or sending enticing offers to get employees to click on links or open malware-infected attachments.

Causing Chaos

Some hackers aren’t after money; they just want to cause disruption. They often target service providers or companies with many connections, aiming to create a domino effect of chaos. “By disrupting these businesses, they can affect a broader network, amplifying the impact of their actions,” he says.

Website Attacks

Websites built on platforms like WordPress with many plugins can be vulnerable to attacks. Hackers might exploit these weaknesses to take down the site and demand a ransom. Bonheim stresses that often, these cyber attackers seek multiple smaller payouts instead of a single large one, making it easier to pressure businesses into paying.

Blackmailing Executives

Hackers often target executives, as they have much to lose. By accessing sensitive information on their phones or social media accounts, hackers can blackmail them, threatening to release damaging information unless paid. This tactic leverages the personal and professional stakes involved, making it a potent tool for extortion.

Personal Vendettas

Sometimes, hackers are motivated by personal grievances. They might target someone or a company to settle a score. “Protect yourself by using strong passwords, enabling two-factor authentication, and being cautious of suspicious emails, he says.

Opportunistic Attacks

Not all attacks are targeted. Some hackers use bots to cast a wide net, looking for any vulnerable system they can find. They send phishing emails to trick employees into clicking on links, which can then be used to launch further attacks.

In the end, it’s not just the big companies at risk. Anyone can be a target. So, it’s crucial to stay vigilant and protect your business from potential threats.

The post Eight reasons why your business may get hacked appeared first on ProtectionWeb.

NHLS cyber attack could cost lives

Guy Martin — Mon, 15 Jul 2024 10:58:11 +0000

A day after Minister in the Presidency, Khumbudzo Ntshavheni, last week assured South Africans cyber security was “receiving the necessary attention” a second incident with potentially far-reaching implications was made public.

Ntshavheni was reacting to so-called “revelations” of at least R300 million lost to cyber theft at the Department of Public Works and Infrastructure (DPWI) over a 10 year period. In a statement she said a State Security Agency (SSA) investigation was ongoing with continuing support and advice to government departments on cyber security.

Next in line for SSA attention in this regard, according to Democratic Alliance (DA) Portfolio Health Committee member, Michelle Clarke, should be the National Health Laboratory Service (NHLS), a Department of Health (DoH) entity.

It assists with communicable diseases, occupational health and cancer surveillance in addition to providing diagnostic pathology services. It has specialised institutes including the National Institute for Communicable Diseases (NICD), which includes the National Cancer Registry (NCR), National Institute for Occupational Health (NIOH), Forensic Chemistry Laboratories (FCL) and SA Vaccine Producers Association (SAVP). NHLS has laboratories in all nine provinces and is seen as a critical component of South African government healthcare.

A cyber-attack on NHLS, Clarke said, “rendered critical data unusable, significantly disrupting delivery of essential health services”.

Unlike the DPWI allegations, where money was uppermost in the cyber thieves’ minds, the NHLS attack could be life threatening in certain instances.

The attack, attributed to a group going by the name BlackSuit, affects issuing of test results to clinicians. This delay, Clarke said, especially for life-threatening conditions such as TB and HIV, can have dire consequences for patients.

The NHLS has implemented alternative measures, including a critical test list to manage the workload and ensure urgent tests are prioritised. “However, routine tests are still being performed, albeit under strained conditions. The development of an electronic registration system for new samples and test results is a positive step, but the current manual communication of urgent results is not a sustainable solution,” Clarke said.

The post NHLS cyber attack could cost lives appeared first on ProtectionWeb.

NHLS apologises for blood result delays following cyber attack

Guy Martin — Thu, 04 Jul 2024 11:53:29 +0000

The National Health Laboratory Service (NHLS) has said that while all its laboratories are operational following a cyber-attack, the issuing of test results to clinicians remains an issue.

“Under normal circumstances, the laboratory reports are automatically generated and sent to clinicians or made available on WebView, this incident has disabled that functionality. However, all urgent results are communicated telephonically to requesting clinicians,” the NHLS said in a statement on Wednesday

The NHLS announced late last month that it was hit by a cyber-attack, which compromised its systems and infrastructure.

In the meantime, the State-owned diagnostic pathology service provider said it was still implementing alternative plans and steps to maintain business continuity.

The NHLS has since distributed a critical test list to all health facilities.

“This is done to limit the volume of test requests, allowing laboratories to cope with the workload. However, this does not imply that routine tests will not be performed.”

In addition, the service provider had to come up with ways of making tuberculosis (TB) and HIV viral load historical test results available to clinicians.

“More tests, prioritising those on the critical test list, will be made available. In addition, we are in the process of developing an electronic registration system for registering new samples and providing test results electronically. Access to laboratory results will be the same as the historical TB and HIV viral test results.”

According to the NHLS, its current focus is to bring all its systems back online by the estimated mid-July to ensure end-user access remains.

“The NHLS is handling this challenge with extreme urgency to ensure the timely and secure recovery of all affected operations.”

Meanwhile, the organisation has since opened a case with the South African Police Service (SAPS) and informed all the relevant regulatory bodies about the breach.

“The NHLS views this attack in a serious light with significant worry and is treating the situation with great urgency. The breach has endangered the safety and well-being of millions of public health patients.”

The Board and its leadership team have apologised for the inconvenience caused by this occurrence and assured the public that the organisation is taking all necessary steps to resolve the situation.

“Despite the incident, the NHLS remains fully committed to providing high-quality diagnostic services to the public. The NHLS appreciates all stakeholders’ patience and the support we continue to receive during this difficult time.”

The post NHLS apologises for blood result delays following cyber attack appeared first on ProtectionWeb.

National Health Laboratory Service hit by cyber attack

Guy Martin — Thu, 27 Jun 2024 09:42:55 +0000

The National Health Laboratory Service (NHLS) has confirmed that it experienced an information technology (IT) security breach this past Saturday – due to a cyber attack – compromising its systems and infrastructure.

A finding from the NHLS preliminary investigation, however, suggests that no patient data has been lost or compromised.

“All patient data is safe. The investigation indicated that a ransomware virus was utilised to target selected points in the NHLS IT systems, rendering them inaccessible and blocking communication from the laboratory information system and other databases to and from users,” the NHLS said.

The organisation’s systems remain inaccessible both internally and externally, including to and from healthcare facilities until the integrity of the environment is secured and repaired.

“All users will be aware that the NHLS networked laboratory system is heavily reliant on these information technology systems that have been disrupted.

“It has been established that sections of our system have been deleted, including in our backup server and this will require rebuilding the affected parts. Unfortunately, this will take time and investigations thus far have not advanced enough for us to give a timeframe toward the restoration of our systems and full service,” the NHLS said.

Stakeholders and the public will be informed as soon as more information becomes available.

“The cyber attacks did continue but we have been able to block these because of the additional layer of security that was built to prevent further damage. We also have had to shut down systems to enable us to repair the damage.”

In response to the breach, the NHLS said it swiftly activated its incident response team, which included both internal experts and external cybersecurity professionals.

“It must be emphasised that the NHLS’ responsibility is to ensure business continuity and quality service delivery.

However, the institute stated that all of its laboratories are currently fully functional and are receiving and processing clinical samples.

Under normal circumstances, the laboratory reports are automatically generated and sent to clinicians or made available on web view, but the incident has disabled that functionality.

“However, all urgent results are communicated telephonically to requesting clinicians.”

The organisation has acknowledged the inconvenience that this disruption may have caused, for which they apologised.

“The NHLS Board under the leadership of Professor Eric Buch and the executive leadership team, led by the CEO, Professor Koleka Mlisana, are working around the clock to address this unfortunate incident and ensure the continuity of our services.”

The NHLS is a government diagnostic pathology service responsible for supporting health departments.

The post National Health Laboratory Service hit by cyber attack appeared first on ProtectionWeb.