WannaCry delays Lorenzo go-live at East and North Hertfordshire

The impact of the May global cyber-attack has caused one trust to delay its Lorenzo electronic patient record (EPR) deployment for over two months.

East and North Hertfordshire NHS Trust has postponed its Lorenzo electronic patient record (EPR) go-live date from 1 July to 8 September, after “considerable disruption” from WannaCry.

The 12 May cyber-attack caused havoc around the world and in England dramatically impacting the NHS. A total of 48 trusts were infected by the ransomware which exploited a known Microsoft vulnerability.

East and North Hertfordshire declared a major incident, with a complete loss of IT systems and some telephony systems, according to its May board papers. Normal activity resumed on 19 May, and the trust said no patients were harmed as a result of the cyber-attack.

A trust spokesperson said that the cyber-attack “caused considerable disruption to the trust close to the original 1 July go-live date” and a decision was made to postpone the Lorenzo implementation.

DXC Technology’s Lorenzo is being deployed at East and North Hertfordshire as part of its Digital Transformation programme, as its EPR and also patient administration system (PAS).

The trust’s July board papers said that following a dress rehearsal for Lorenzo, concerns over three areas emerged: operational readiness, number of staff signed up for training and reporting word stream.

The 8 September go-live date “is still achievable provided all risks have been mitigated”, said the papers.

Digital Health News reported in July last year, that the trust was granted central funding to deploy Lorenzo as its EPR, as part of the deal agreed between the Department of Health and CSC in 2012.

East and North Hertfordshire confirmed at the time it would receive £3.09 million over two years, as part of the deal.

CSC changed its name to DXC Technology in April following a merger with Hewlett-Packard Enterprise.

As part of the trust’s digital initiative, electronic observation software, Nervecentre, is also being rolled out for clinical and nursing patient observations, escalation and emergency department systems.

The cyber-attack did not affect the Nervecentre roll-out.

“Significant progress has been made in the incremental roll out of the Nervecentre electronic observations and the new pharmacy system has been successfully implemented”, said the July papers.

North Staffordshire Combined Healthcare NHS Trust also pushed back its Lorenzo deployment plans following the cyber-attack. The trust delayed its go-live by a week after its shut down its IT systems as a precaution.

East and North Hertfordshire provide care for about 500,000 people annually, and operate from four different sites.