Mental health trusts still unable to access records months after attack

Twelve NHS mental health trusts are struggling to recover electronic patient records after CareNotes EPR software was hit by a ransomware attack. The attack, more disruptive than 2017’s Wannacry, occurred in August and affected key patient data access. Experts predict some systems won’t be operational until 2023. While initially using Microsoft applications, several trusts are now switching to an interim EPR system, RiO, for at least a year. The impact on staff and patient care has been significant.