We have completed a rebuild of the Carenotes base estate. Preliminary testing is complete and we are currently testing restored services with pilot sites. We are also testing the data importer tools which allow data captured during the outage period to be restored into live systems.
Planned dates for the restoration of service at each site are being communicated to all customers directly and the overall restoration programme remains on track.
We have completed a rebuild of the Carenotes base estate and are beginning to work with customers to build and configure individual customer systems.
Once preliminary testing is complete, we are aiming to fully transition Carenotes to the Pilot site for end-to-end testing. This will entail bringing up a Pilot customer to test the different functionalities, including data importer tools which have been developed to support importing retrospective clinical records. We will work alongside this Pilot customer to address any support needs. Once the initial Pilot test has been completed, we will run a second Pilot customer through the same process. Once feedback from both Pilot test rounds has been incorporated, we will communicate specific dates for testing to remaining customers.
Work has commenced to rebuild the environments required to restore live services for Carenotes customers and we anticipate the first customers will be live within the next 18 days.
The restoration process involves rebuilding the Carenotes estate and configuring Carenotes for each customer thereafter. Once the first customer has gone live we will enter subsequent phases of configuring, testing and go live for customers in blocks of three – each phase taking 9 further days.
We are working with the Carenotes Strategic Steering Committee and the NHS to define the order in which further sites will be restored. Non-NHS customers will also be included within that restoration plan and all customers will be notified once we have a clearer view of timescales for each site.
We continue to work with the Carenotes customer base on tools which assist with the retrospective load of clinical records once the service is restored.
Most of our Carenotes customers now have access to their log shipping data. For those who don’t we are continuing to contact them on a 1:1 basis to discuss data requirements. There is further information available on our Customer Support Site for customers who want to capture clinical notes data.
Forensic Investigation
Our forensic investigation is progressing in line with our timeline and plan. We are now building a much clearer picture of the incident’s root-cause and will soon be in a position to confirm and share Indicators of Compromise (IOCs) with customers on request. In parallel, our third-party experts are well advanced in their investigation into any potential data impact as a result of the incident. We will update customers as appropriate and comply with any applicable notification obligations.
We recognise that this has been a challenging time for our customers, and we appreciate your patience and understanding as we work to recover from this attack. We continue to prioritise the safety and security in all of our decision making and are approaching this restoration process with diligence and rigour.
We have continued to work over the weekend and today and our investigation into the Carenotes infrastructure continues. In parallel we have also begun to investigate contingency measures for recording and uploading clinical notes. We hope this will be available for use soon.
The vast majority of Carenotes customers have access to log shipping data and we continue to create action plans on how we can support Carenotes customers who may not have access to this data.
As we have previously shared, we have a workstream dedicated to developing detailed recovery action plans, and we will provide additional updates as those plans are finalised.
For Carenotes customers we envisage contingency measures will be required for at least a further three to four weeks.
Our investigation into the Carenotes infrastructure continues. In parallel we have begun to implement multiple workarounds for tracking basic data inputs, like appointment times, which we hope will be available for use soon. We are also preparing to migrate data on the system backend which will allow us to start restoring certain components of the system. Finally, we are working to harden our Carenotes servers.
The vast majority of Carenotes customers now have access to log shipping data and we continue to create action plans on how we can support Carenotes customers who may not have access to this data. As we have previously shared, we have a workstream dedicated to developing detailed recovery action plans, and we will provide additional updates as those plans are finalised.
For Carenotes customers we envisage contingency measures will be required for at least a further three to four weeks.
We are currently forensically investigating the Carenotes infrastructure to gain a clear picture of its current status. However, we can confirm that off-site backups are in place and our Carenotes leadership team is engaged in discussions with the Carenotes Strategic Steering Group on how we can utilise available data and support Carenotes customers moving forward.
Advanced is creating action plans on how we can support Carenotes customers who may not have access to log shipping data. In parallel to this forensic investigation, we have a working stream creating the recovery actions plans. We will provide additional updates as those plans are finalised.
For Carenotes customers we envisage contingency measures will be required for at least a further three to four weeks.
If you do have any specific questions please contact Advanced in the regular way either via your Account Manager or Support Team.