NHS Dumfries and Galloway experienced a data leak due to a cyber attack by INC Ransom, who alleges possession of NHS Scotland patients' data.

The hackers claim to have three terabytes of sensitive information, including medical documents and patient details.

INC Ransom has published medical documents to substantiate the breach and is threatening to release more data if a ransom isn't paid.

The cyberattack's impact is localized and hasn't disrupted patient services across NHS Scotland.

The Scottish Government, along with NHS Dumfries and Galloway, is assessing the breach's impact and taking steps to notify affected individuals.

INC Ransom, active since 2023, has a history of targeting organizations, with over 65 reported breaches including high-profile entities.

This incident underscores the urgent need for enhanced cybersecurity defenses in the healthcare industry.