State could face huge damages claims for cyber attack

Some personalised medical data of Irish patients has been shared online in a bid by the attackers, a Russian group known as Wizard Spider, to further their claims for a $20m ransom.

The State could face hundreds of millions in legal claims from victims if the HSE is found to have failed to adequately protect patients' data from the cyber hack.

Should the HSE’s security defences be found to have been lower than the required standard, people and companies who have had their data compromised can sue in the courts under GDPR.