Issuing of plastic medical cards paused after cyber-attack on external provider

The Health Service Executive (HSE) in Ireland has temporarily suspended the issuance of plastic medical cards, European Health Insurance Cards (EHIC), GP visit cards, drugs payment scheme cards, and long-term illness cards. This pause follows a cyber-attack targeting the systems of an external company responsible for printing these essential cards.

“

We have reported the incident to the Data Protection Commissioner and are working with the external provider to review the small amount of data impacted. We will assess the need to notify individuals whose data may have been impacted.

According to the HSE, its own internal systems were not breached. However, it is understood that a limited number of HSE records were accessed by the perpetrators of the attack. The organization has reported the incident to the Data Protection Commissioner and is collaborating with the external provider to assess the extent of the data breach.

"We will assess the need to notify individuals whose data may have been impacted," the HSE stated. In the interim, applicants will receive letters confirming their eligibility for the relevant schemes, which can serve as official proof. For those needing EHIC cards for healthcare abroad, "Provisional Replacement Certificates" are being issued, offering the same entitlements. Additionally, adult EHIC cards can be accessed via the HSE Health App.

“

Provisional Replacement Certificates providing the same entitlement to healthcare while abroad are being provided instead of plastic EHIC cards.

The HSE emphasized that this incident has no bearing on patients' access to healthcare services. All service providers, including GPs and pharmacies, typically use digital channels to verify eligibility, and the processing of applications for medical cards and other health schemes continues as normal. The HSE activated its cybersecurity protocols immediately upon being alerted by the external provider, assuring that all data protection breaches are handled seriously and in accordance with legislation and policy.

“

There is no impact on access to healthcare services, applications for medical cards, EHIC cards and other health service schemes are being processing as normal.