Thursday 5 November 2026Compiled from published reports. Every claim links to its source.

Ireland Crime

Every case followed from the first report to the sentence, or to where the reporting stopped.

Case No. 29771Cyber attack (ransomware)

Gardaí gather evidence in seven countries over HSE ransomware attack

The Health Service Executive was forced to shut down all of its IT systems following a ransomware attack earlier in 2021 that focused on accessing data stored on central servers. Gardaí carried out a disruption operation in which they took over the technical infrastructure of the gang suspected of being behind the attack, alerting 753 potential victims. The investigation is now gathering evidence in seven different countries, with the Cyber Security Bureau tracing the cryptocurrency used by the gang. Detective Chief Superintendent Paul Cleary described the case as technically complex but progressing.

  1. Reported6 Oct
  2. Arrested
  3. Charged
  4. In court
  5. Verdict
  6. Sentenced
reportedhappened, not reportedlatest stagenot yet

Key facts

consolidated from all reports
What happened
  • The HSE was forced to shut down all of its IT systems following a ransomware attack.
  • The attack focused on accessing data stored on central servers.
When
The attack occurred earlier in 2021.
Investigation
  • Gardaí are gathering evidence in seven different countries in relation to the HSE cyber attack.
  • A disruption operation saw gardaí take over the technical infrastructure of the gang suspected of being behind the attack.
  • The Cyber Security Bureau is following the money and tracing the cryptocurrency used by the gang.
Other details
  • The disruption operation resulted in 753 potential victims of the gang being alerted.
  • Detective Chief Superintendent Paul Cleary from the Garda National Cyber Security Bureau made the statements.
  • The investigation is described as technically complex but progressing.
9 statements extracted from the articles
  • whatThe HSE was forced to shut down all of its IT systems following the ransomware attack. (rte.ie)
  • whatThe attack focused on accessing data stored on central servers. (rte.ie)
  • investigationGardaí are gathering evidence in seven different countries in relation to the HSE cyber attack. (rte.ie)
  • investigationA disruption operation saw gardaí take over the technical infrastructure of the gang suspected of being behind the attack. (rte.ie)
  • investigationThe Cyber Security Bureau is following the money in the investigation. (rte.ie)
  • investigationGardaí are tracing the cryptocurrency that gangs use. (rte.ie)
  • otherDetective Chief Superintendent Paul Cleary from the Garda National Cyber Security Bureau made the statements. (rte.ie)
  • otherThe disruption operation resulted in 753 potential victims of the gang being alerted. (rte.ie)
  • otherThe investigation is described as technically complex but progressing. (rte.ie)

The reporting

newest first
  1. 6 Oct2021
    Reportedrte.ie, first report
    HSE cyber attack evidence being gathered - gardaí

    Article details the ongoing investigation: evidence gathering in seven countries, a successful disruption operation, 753 potential victims alerted, and cryptocurrency tracing as a live angle.