Hammersmith Medicines Research

Hammersmith Medicines Research (HMR) is a medical research organisation headquartered in the United Kingdom. The organisation focuses on conducting clinical research studies, with a particular emphasis on vaccine development. In early 2020 it was engaged in preparatory work for COVID‑19 vaccine trials. Its activities involve coordinating research protocols, managing study data, and working with sponsors and regulatory bodies. As a UK‑based entity, it operates within the national healthcare research landscape.

On 14 March 2020 HMR suffered a ransomware attack carried out by the Maze cybercriminal group. The attackers encrypted the organisation’s files and exfiltrated sensitive patient information, including medical questionnaires, passports and national insurance numbers. After HMR refused to meet the ransom demand, Maze released a sample of the stolen data, which comprised records belonging to over 2,300 former patients. This leak contradicted the group’s earlier public pledge to avoid targeting healthcare organisations during the pandemic. Despite the encryption, HMR reported that it restored its systems without operational downtime. The incident attracted regulatory scrutiny because of the exposure of highly personal data. Cybersecurity firms offered free assistance to HMR and other healthcare providers dealing with ransomware, while law‑enforcement agencies investigated the breach. Following media coverage, the attackers later removed the leaked data from public sites.