Tusla data on missing boy Kyran Durnin was lost in cyber attack on HSE

by PoppedCork

25 comments
  1. They’re famous for being archaic so please don’t tell me there is no paper file on this kid

  2. Having put in a gdpr request to the hse at the time, followed up again via email and got a bounce during the incident, asked again post incident. In my analysis of the email headers it looks like the attach totally broke email where they migrated from on prem to 0365 and lost everything on prem. How many lives must have been lost due to this. Communications between medical etc.

  3. Strange. I would have thought cyber attacks are more a breach of data where they threaten release of the data. Most cyber attacks don’t physically remove or move the files do they?

  4. The cyber attack in May 2021? 3.5 years ago? Every HSE dept works with paper files too. Where is that? Also tusla are meant to be a separate legal entity from the HSE. Not very separate if they still use connecting IT systems. This screams of “pass the book Charlie”. Heads will have to roll for this and they’re all trying to shove it away from their desks.

  5. Sound like a lie to me

    There is no mention of files being deleted in the HSEs cyber attack press release: https://www2.hse.ie/services/cyber-attack/what-happened/

    And Tusla’s page says the same, only mentions data being copied not deleted: https://www.tusla.ie/dataprotection/

  6. Were the case workers memories erased also? What a thundering load of bullshit. Tusla are unbelievably incompetent to the extent that I doubt they rely on computerised systems to any extent

  7. A Tusla spokeswoman said: “A system used by some staff in this regional area was not restored following the cyber ­attack, as it was based on old technology.

    “However, this was not the system of record for case notes and isn’t relevant to the internal review under way.”

    Article doesn’t say what data is missing, and Tusla says it isn’t case notes.

    Is it like, just his schedule of appointments or something, then? Can’t see what other data they’d be holding, and I’m sure that’s not the biggest issue in the world.

    Think the Indo’s just being the Indo on this one and leaning into “Tusla incompetent” for a few bait clicks.

  8. A big problem with Tusla is they have no central data base (I will stand to be corrected if this has changed).

    If a child in Dublin has a massive file and they move to Limerick, the Limerick Tusla will have no idea about the previous dealings. Unless of course they apply and get the file from Dublin. It’s madness to have a system like that in 2024.

  9. I believe they are lying.

    But if it is true when there should be a huge review of every case to see if anymore cases have gone missing. You just incase anymore kids have been murdered.

  10. Of course and those records woukd have been meticulously maintained just like the case I cours last week where tuslas lawyer said they haven’t seen a kid in over 6 months but “sure he’s grand” and teh judge ordered a welfare check.

  11. On the one hand, Tusla has shown itself time and again to be a useless organisation and you’d struggle to believe them.

    On the other hand, the state before the HSE hack was looking for a national cyber security director on €84k a year, which they more than doubled to €184k after the hack. €184k will not buy you a national level cybersecurity expert – it’d barely buy your medium sized tech enabled enterprise a head of IT. And then the HSE’s CTO, is was well got after years in Intel, quit in frustration at an inability to get anything done.

    So we do have a problem with government IT and cyber security, even if Tusla is the boy who cried wolf.

Comments are closed.