HSE pauses issuing some services, including medical and long-term illness cards due to cyberattack

The Health Service Executive (HSE) has temporarily halted the issuance of essential plastic cards, including medical cards, European Health Insurance Cards (EHIC), GP visit cards, drugs payment scheme cards, and long-term illness cards. This pause follows a cyberattack on the company responsible for printing these cards.

“

As a result, and in line with our cyber security practices, the HSE’s cyber security protocols were immediately activated. HSE [computer] systems were not compromised.

The HSE confirmed it was alerted by its external card printing provider about the cyberattack on their systems. While the HSE's own computer systems remain secure, a limited number of HSE records were accessed by the attackers targeting the external provider. The incident has been reported to the Data Protection Commissioner (DPC), and the HSE is working with the provider to assess the impact on the accessed data. Individuals whose data may have been affected will be notified in accordance with data protection legislation.

“

It is understood that a small number of HSE records were accessed.

Despite the pause in plastic card production, the HSE emphasizes that there will be no disruption to the services people receive. For EHIC cards, provisional replacement certificates are being issued, offering the same entitlement to healthcare abroad. These cards are also available digitally through the HSE Health App. Applications for medical cards and other health service schemes are being processed as usual, with eligibility confirmed via letters. Healthcare providers can verify eligibility through digital channels, ensuring no impact on access to care.

“

In line with the data protection legislation, we will notify individuals whose data may have been impacted.