The attack, which hospital IT staff discovered late on the evening of November 15, is understood to have impacted all five sites the hospital complex covers. To prevent the infection from spreading, it appears that a decision was taken to close down the IT systems and operate in what is known as “degraded mode.” The hospital, with 10,000 staff and 2,500 beds, is the largest in Europe that I know of to have been walloped by a ransomware attack since WannaCry.