back to article UK's North Midlands hospitals IT outage, day 2: All surgery and appointments cancelled

An ongoing network issue with provider Cisco has caused all outpatient appointments and elective surgery to be cancelled at two North Midlands hospitals in the past 24 plus hours, The Register can confirm. Both County Hospital and Royal Stoke University Hospital have had to shelve procedures since systems first went down on …

  1. tin 2

    Cisco?

    Really? they're the provider in this one? I doubt that somehow. More like someone or other not able to get a Cisco product working correctly.

    1. Anonymous Coward
      Anonymous Coward

      Re: Cisco?

      The mental picture I got from this was that the spokesdroid was told to say it was a Cisco problem.

      In the background two monkeys can be seen hammering a Cisco switch and squawking maniacally.

      1. A Non e-mouse Silver badge

        Re: Cisco?

        You have to remember that Cisco sell more than switches nowadays. Servers & services are on their menu nowadays.

      2. Yet Another Anonymous coward Silver badge

        Re: Cisco?

        >two monkeys can be seen hammering a Cisco switch

        So they escalated it to engineering support

      3. Robert Sneddon

        Monkeys?

        I object to that gross mischaracterisation of my old job. Apes, if you please.

        1. OssianScotland

          Re: Monkeys?

          <angry> OOK! </angry>

    2. Robert Carnegie Silver badge

      Re: Cisco?

      If only it was WannaCry; you can remove WannaCry (and all of your data, but you have a backup, yes? maybe?)

    3. Vince

      Re: Cisco?

      In my head I'm imagining they use Meraki stuff owned by Cisco and something like the licenses expired as they did - at least last time I heard - stop working once the license expires.

  2. Pascal Monett Silver badge

    "Where is your contingency planning for such events?"

    Probably in the same place as the budget for it - limbo.

    These are hospitals, not luxury resorts. When even Google doesn't have a backup fiber link to its bit barn, you can hardly blame a lowly hospital for not having redundancy and multiple servers.

    1. big_D Silver badge

      Re: "Where is your contingency planning for such events?"

      A contingency plan means the manual procedure you have in place to carry on working as (close to) normal, when the IT fails.

      1. Yet Another Anonymous coward Silver badge

        Re: "Where is your contingency planning for such events?"

        Like printing out the contact numbers for the next day/week customers patients

    2. Nifty Silver badge

      Re: "Where is your contingency planning for such events?"

      The cost of stay/person/day of a hospital dwarfs a luxury resort. Then you have the detail of a hospital being a life-critical organisation.

      Amazing to think that in war zones, bombed out hospitals keep operating.

      1. Phil W

        Re: "Where is your contingency planning for such events?"

        "Amazing to think that in war zones, bombed out hospitals keep operating."

        Performing emergency surgeries in a bombed out hospital with the windows/walls half missing, and not worrying about getting paid for it, is not really a fair comparison to an NHS hospital in the UK.

        For one thing, all the staff in that warzone hospital care about their patients, that's why they're still there.

        1. Phil W

          Re: "Where is your contingency planning for such events?"

          For clarity I would add that, I'm quite sure the Doctors and Nurses in the NHS do care about their patients, it's the manglement above them I was referring to. Manglement types don't tend to hang around in warzones.

    3. Anonymous Coward
      Anonymous Coward

      Re: "Where is your contingency planning for such events?"

      I work in a hospital and we've got multiple redundant servers, network paths, power supplies etc. We test fail-overs regularly and we do test power outages. We've got paper backup systems and emergency PCs which can give access to "hot" information in case our main servers die.

      After all, people's lives depend on it!

      PS. I'm not saying we're perfect but we're at least a match for the banks and financial institutions I've previously worked for. The only thing we don't do is disaster recovery because if the hospital building is destroyed........

  3. monty75
    Facepalm

    "You need a more secure server"

    It literally couldn't be any more secure. No-one at all can access it

  4. Anonymous Coward
    Anonymous Coward

    Money back from the SLA ?

    1. Chris King

      "Money back from the SLA ?"

      Don't blow it all at once, it won't buy you THAT big a bag of penny chews.

  5. Aladdin Sane

    Have they tried turning it off and on again?

  6. Anonymous Coward
    Anonymous Coward

    Have they tried ..

    .. using Huawei?

    Just to stir things up :)

    1. Yet Another Anonymous coward Silver badge

      Re: Have they tried ..

      The advantage of Cisco is that you can call the NSA and they can log in and fix it.

      How do you call the NSA? Just pickup the phone and talk

      1. RegGuy1 Silver badge

        How do you call the NSA? Just pickup the phone and talk

        If you use the words 'bomb' and 'ransom' it will probably connect automatically.

        1. Anonymous Coward
          Anonymous Coward

          Re: How do you call the NSA? Just pickup the phone and talk

          Kind of like little Jonny Tables, someone should name their kid "Bom Ransom" and see how it goes... :)

        2. Flywheel

          Re: How do you call the NSA? Just pickup the phone and talk

          Obligatory Dilbert comic strip reference...

  7. big_D Silver badge
    Facepalm

    First rule of IT systems...

    When I started development, the first rule of implementing an IT system was to also define a manual backup contingency procedure to put into effect when (not if) the IT system failed.

    This process was then to be tested regularly and refined by putting any findings from the test into the procedure.

    Heck, at my last job (food production), we had a 15 minute support window for critical outages, otherwise the customer was facing 6 figure losses. Surely health services have a higher priority than slaughtering animals?

    1. John 110

      Re: First rule of IT systems...

      "...Surely health services have a higher priority than slaughtering animals?..."

      You would think so, wouldn't you...

    2. Mandoscottie

      Re: First rule of IT systems...

      couldnt agree more, until you factor in its NHS and crippled by <insert political party in number10> decades of under investment, sky high trust board fees to pay and healthcare, poor it probs bottom of the shitpile.

      then all common sense and "best practises" fly out the window, much to the pain of their poor IT staff.

      id rather be on the dole than try to provide IT in the NHS, a tiny empty pot to p into and no funds.

    3. Caver_Dave Silver badge
      Holmes

      Re: First rule of IT systems...

      When I started selling computers (CPM and MSDOS), I would identify the manual system and then get that streamlined (under feasibility funding). It was often the case that once the manual system was sorted, it would be another few years before they decided that a computer was actually needed to help them, and that computer system initially copied the manual system, to aid implementation and fall-back.

      Now it is a case of "We need a computer system! ... what was the problem?"

      1. Yet Another Anonymous coward Silver badge

        Re: First rule of IT systems...

        The trouble is that this method normally confirms either the manual system is fine, or the manual system is hopeless AND there is no way to computerise it.

        Either way not a great result if you are trying to sell a few billion quid worth of IT system

    4. This post has been deleted by its author

    5. KittenHuffer Silver badge
      Coat

      Re: First rule of IT systems...

      I thought the first rule of IT systems ....... was not to talk about IT systems!

    6. Anonymous Coward
      Anonymous Coward

      Re: First rule of IT systems...

      > Surely "health services" have a higher priority than "slaughtering animals"?

      Some places would argue it's the same thing.

  8. Anonymous Coward
    Anonymous Coward

    Hey why not have a few fax machines just in case... 'No' says Matt Hancock via his shiny app

  9. rg287

    Worth noting that when they mention "County Hospital", what they mean is "Stafford Hospital".

    Yes, that Stafford Hospital.

    The one with all the deaths circa 2010-2015.

    They're pretty much permanently insolvent and the maternity unit is currently on the chopping block.

    Budget? What budget? They can't afford nurses, much less computing - two monkeys with wrenches in the background would be positively decadent!

    1. Chris King

      "Stafford Hospital"

      "The one with all the deaths circa 2010-2015"

      That, and a big breakout of Legionnaire's Disease back in 1985 when it was still Stafford District General.

      UPDATE: The Trust just tweeted that they've fixed stuff.

      1. Anonymous Coward
        Anonymous Coward

        Re: "Stafford Hospital"

        Hmm, maybe it should have been (you've been) Shafted District General.

      2. Anonymous Coward
        Anonymous Coward

        Re: "Stafford Hospital"

        Back in the mid-80's they also had the an IT system that automatically assigned appointment slots and just kept going further and further forward as the waiting lists got longer and longer.

        Eventually they were sending out appointment confirmation letters for appointments that were more than a year in advance and patients were turning up to hospital a year early thinking that it was just a typo on their letter!

  10. Torquemada_131
    Trollface

    In support of the behemoth...

    I'd just like to say that, if Cisco could identify this specifically as a Cisco fault, they'd have put manpower and resources behind it immediately.

    Yes,.. I'm an ex-Cisco contractor,... and I still "like" and "Respect" the company, and around 99% of the people,...

    When faced with a mission critical problem such as this, especially in the Health Sector, they know that anything less than 100% commitment will generate

    bad news in the media,...

    So whatever the problem is,... they'll be paying serious attention.

    1. Anonymous Coward
      Anonymous Coward

      Re: In support of the behemoth...

      "I'd just like to say that, if Cisco could identify this specifically as a Cisco fault, they'd have put manpower and resources behind it immediately."

      Unfortunately I can't give any concrete or non-concrete details, or non-details, that may or may not exist, but I could name a well known very large high street retail chain who may or may not be in banking and who may or may not apparently or allegedly be able to counter this statement of efficiency about a large supplier that may or may not be Cisco or someone else.

      I mean, how hard can it be to find a continually recurring kit crap-out and network fault and thus actually keep something simple like a retail branch reliably connected when your kit keeps falling over, it takes days to organise a simple off-and-on-again (but no permanent fix) and you're the world's biggest network equipment provider? Unbelieveably hard it seems.

      A/C, obviously, for not alleging or aluding to any not-reasons about no-one at all, Guv.

      1. Claverhouse Silver badge

        Re: In support of the behemoth...

        Nicely done.

  11. Anonymous Coward
    Anonymous Coward

    Just spent the day in Edinburgh's Royal Infirmary as a patient. Systems down there too (and across the Lothians)

    I seem to remember reading they are using Cisco AMP after the wannacry outbreaks. I wonder whether its gone a bit wrong?

  12. Long John Silver
    Pirate

    This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

    The University Hospitals of North Midlands NHS Trust has displayed remarkable insouciance with regard to preparation for IT disasters it ought anticipate. Seemingly, the Trust is wholly reliant on an external supplier to keep its Internet and Intranet services running and instantly be able to fill the breach when problems arise.

    Harking back to the days of paper records offers clues to how modern IT dependent hospitals can create useful backstops. Although paper records lacked the speed of access and flexibility of current systems they were robust. Fire/water were the worst hazards for records. It was pretty much inconceivable, except in times of warfare, that multiple hospitals would suffer this kind of damage on the same day.

    Bear in mind that medical records, and supporting information, fall into two categories. First, those in current active use. Lists for planned admissions, cold surgery, and outpatient attendance would be known in advance, several days and more so. Second, records for people presumed still to be in contact with the hospital but not needed immediately.

    From these considerations arise a number of modern technology and 'legacy' based methods for weathering an IT 'outage'. They are not mutually exclusive.

    1. All records of people in touch with the hospital during, say, the past calendar year to be kept in an on-site Intranet backup server. Duplicates, along with not-current records would be held by off-site Internet connected services. This offers reasonable limited protection against off-site server/connection failures. Having a second on-site backup as well might be money very well spent if clinical consequences of 'outages' together with adverse publicity and justified criticism of management are to be avoided.

    2. On regular basis (perhaps daily) temporarily transmit records, those anticipated to be required soon after, onto devices capable of standing alone should the Intranet fail. Records would be distributed to devices on wards/units associated with a planned admission or outpatient appointment. With this protection in place it makes sense to devolve wards, units, and departments into clusters of local Intranets able to function in absence of the primary network. Thereby, records can be accessed on the usual terminals by staff. As soon as a file keeping emergency ceases, updated records can be transferred back to their central on-site repository and onwards to off-site storage.

    3. Automatically create abbreviated paper and/or microfiche records for use the next day (or so). Full records can be very thick paper files, sometimes multiple. Yet, only more recently documented referral letters, hospital contacts, and test result reports need be known for planned admissions and outpatient appointments. Clinicians would be asked to collaborate in setting limits on record content culling. The rest is mainly of interest for comprehensive periodic patient reviews and for medical-legal purposes, neither of which likely demanding urgent access.

    The NHS needs to embrace a 'fail safe' ethos. Moreover, total reliance on external agencies asks for trouble.

    1. Claverhouse Silver badge

      Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

      All very true. But I understand when Brexit comes, organised by the people who worked very hard serially voting just before the end of March, it will unleash a potent particularly 'British' natural genius and self-reliance that will sort out all such niggling little problems and allow us to make the country stupendous.

      And less regulated.

      1. Anonymous Coward
        Anonymous Coward

        Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

        You should have used the joke icon to alert the brexiteers you're not serious.

      2. STOP_FORTH
        Unhappy

        Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

        I feel really bad about myself now. I voted for the UK to not be stupendous.

        1. phuzz Silver badge
          Facepalm

          Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

          Shit, that's where I went wrong, I thought I was voting for the country to not be stupid, turns out I accidentally voted for the country to be not stupendous. Man, now I have to apologise to all of those leave voters...

    2. Anonymous Coward
      Anonymous Coward

      Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

      All executives should remember that without an effective DRP one day their jobs will be toast. Systems always fail, it's how you deal with the failure that counts.

      1. Anonymous Coward
        Anonymous Coward

        Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

        Surely you mean "Promoted"

        NHS/Gov ALWAYS rewards failure with a promotion, just look at whichever loon becomes our next Tory PM.

        (NOT a joke - although the new PM will be).

    3. Anonymous Coward
      Anonymous Coward

      Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

      I agree.

      The problem is that to do that costs money. Money that the beancounters will likely see as wasted. After all, you need hardware and software for the infrastructure, which incurs maintenance, electrical power, purchase and licencing costs, and you may need staff to operate it, which, again, would be an extra cost.

      For something that in an ideal world would rarely, if ever, be used.

      Personally, I think they *should* have that kind of resilience built in, because in an emergency, people could die without the info held in those files, but they probably won't, due to money. After all, they've outsourced this stuff to save money (it's debatable whether it does, but that's another story), so may not be willing, or able, to bring this stuff back in house.

      Not only is there the cost involved in doing so, but the suppliers may not be able to offer that function, and may be unwilling to give the NHS the necessary access to do so.

      We are hitting that particular thing. We handle a lot of equipment loans where I work, and previously we operated a custom designed system that enabled us to track who had borrowed what. It also enabled some equipment to be pre-booked, and when the equipment was pre-booked, would enforce a requirement for a risk assessment to be approved before the booking could go ahead . It also maintained the company's inventory of equipment that was not available for loaning or booking.

      Sadly, the only part of that system still functional is the inventory management as two of the development team left (and where not replaced), and the remaining members (of whom I am one) didn't really have time to spend on the development in our day to day jobs.

      The down side is that we have bought in systems for managing the bookings, and loaning. Two, seperate, commercial systems, and neither will share data either with each other, or with our inventory system. And each does require their own inventory.

      1. Krassi

        Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

        I imagine many other hospitals have had similar problems, and not all been properly prepared as per your excellent advice, but they find a way to manage, muddle through for the duration and we don't hear about it. What gets me about this case is the defeatist, give up and all go home approach.

        Many of the patients coming in know what they are there for, who they are seeing and what for, many appointments are exactly the same checks etc as last time. And, for example, try to contact the patients and ask them to bring their appointment letters. Even these days there are lots of paper records in the system . Make an effort, it might be slower than usual and maybe some things will have to be cancelled, but getting through even 50% of the workload is a huge advance on nil.

      2. Flywheel

        Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

        Money that the beancounters will likely see as wasted

        The real problem is that not enough beancounters (nor MPs for that matter) are inconvenienced by these events. If we had a very ill Chief Accountant who's op was continually rescheduled cancelled I suspect we may see more funds becoming available.

        Same with some MPs - if we had a wheelchair-bound Minister of Transport then the Government would be throwing cash at developing accessible public transport.

        One can dream I guess...

        1. SImon Hobson Bronze badge

          Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

          Ah, remember that back of the car conversation on that documentary a few years ago ? Jim Hacker to Sir Humphrey: How come there's a motorway to Oxford but not to Cambridge ? Humphrey in reply: It's been a long time since we had a transport minister who went to Cambridge !

    4. Anonymous Coward
      Anonymous Coward

      Re: This reflects poorly on the Hospital Trust Chairman, the CEO and other members of its board

      And if Labour hadn't burdened the NHS with such costly PFI contracts the hospitals may be able to afford some of these measures. As it is many hospitals are running a huge deficit.

      It always helps to be fully aware of the facts before prophesising

  13. Anonymous Coward
    Anonymous Coward

    The blame lies at the door of the Labour government who saddled the NHS with exorbitant PFI contracts run by profit-driven third parties.

    It looks from this as though Cisco is not the provider - https://www.jobs.nhs.uk/showvac/1/2/915635272

  14. Anonymous Coward
    Anonymous Coward

    No idea if related

    but matching this timeframe, I happen to know that Cisco managed to stuff up the validation system for some of their SD-WAN appliances, causing them to decide to stop working.

  15. sitta_europea Silver badge

    Oh, Siemens, that's all right then. For a moment I was worried it might be Capita.

  16. Vulture@C64

    Probably licensing related. Somebody rebooted a core switch or router and they'd not renewed the licensing so some functionality was removed . . . because Cisco wants your recurring revenue.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like