It is a peculiar scene playing out across 100 NHS hospitals this morning. Doctors in blue scrubs, accustomed to flicking through digital records with a tap, are now holding biros. Nurses, who usually check drug dosages on screens, are consulting paper charts. The cause is not a power cut but a coordinated cyber attack that forced an emergency shutdown of the IT systems. For the first time in a generation, parts of the health service have reverted to the analogue age.
Walk into any affected ward and you feel a strange quiet. No beeping from the computer terminals. No clatter of keyboards. Instead, the scratch of pen on paper as staff write down blood pressure readings and medication times. A junior doctor told me it feels like stepping back 30 years. She is right. The system they have fallen back on is the same one my mother used when she was a nurse: handwritten notes, carbon copies, and a reliance on the human mind for memory.
The attack, which GCHQ is now investigating, targeted a common software platform used for patient administration. The NHS has been here before. In 2017, the WannaCry ransomware paralysed trusts across England. That attack cost the service £92 million and cancelled 19,000 appointments. This time, the response has been faster. A pre-prepared 'pen and paper protocol' was activated within hours. But the emotional cost on staff is palpable. A consultant in A&E described it as 'performing open-heart surgery with a blunt scalpel'. The technology we take for granted has made us faster, but it has also made us dependent.
For patients, the shift is disorientating. An elderly man waiting for his hip operation looked at the nurse fumbling for the right paper form and said, 'I thought you lot were digital now.' He was right to think so. The NHS has spent billions on digitisation. Yet here it is, reduced to manual processes. The irony is not lost on those who recall the paper-based days. A retired matron, now 78, watched the news and smiled wryly. 'We managed perfectly well with paper,' she said. 'But we had more staff.'
This is the hidden cost of cyber attacks. It is not just the black screens or the encrypted files. It is the sudden reliance on the most fragile of systems: human memory and handwriting. Mistakes will happen. Drug errors are more likely without automated checks. Waiting times will lengthen. The NHS will survive, as it always does. But the cultural shift is profound. We have spent a decade convincing patients that digital is better. Now we must convince them that paper is safe.
GCHQ's involvement signals the seriousness of the attack. This was not a random hack. It was targeted, sophisticated, and designed to cause maximum disruption. The NHS is a soft target because it is underfunded and overstretched. The attackers know that. They bank on chaos. And for a few days, at least, they have achieved it. But there is a resilience in the British spirit that hackers do not understand. Staff are adapting. They are photocopying forms, borrowing pens from reception, and writing down everything with painstaking care.
The real test will come in the weeks ahead. Will the NHS double down on its digital ambitions or re-evaluate its vulnerability? The answer, I suspect, will be both. For now, we watch a strange ballet of paper and ink. It is a reminder that for all our progress, we are still, at heart, analogue creatures.
