NHS providers reviewing stolen data published by cyber criminals

p Back to Top ppPathology supplier Synnovis is contacting NHS organisations which had data stolen and published online following a major cyber attack last yearppThe ransomware attack on 4 June 2024 which led to a patient death caused widespread disruption to NHS services in London including thousands of delayed appointments at Kings College Hospital NHS Foundation Trust and Guys and St Thomas NHS Foundation Trust and delays to blood testing in primary careppSynnovis has now completed its investigation into patient and staff data published online by the cyber criminal gang on 20 June 2024 which includes personal data such as names NHS numbers test results and test codes that indicate the nature of tests requestedppThe stolen data also includes information originating from Synnovis administrative working drive which supported the firms corporate and business support activitiesppMark Dollar chief executive at Synnovis said in a statement It has taken more than a year of painstaking investigation to decipher and piece together the data stolen in this smashandgrab cyberattackppIve seen firsthand the scale of the challenge  even for leading cyber experts to tackle the random and fragmented nature of the data scraped from our systemsppOur focus now turns to notifying the organisations affected We are offering our full support as they determine their next steps including dedicated contact points supporting materials and a website well keep updated with relevant informationppIn an update on 10 November 2025 NHS England said that the investigation has taken Synnovis more than a year to complete because the stolen data was unstructured incomplete and fragmentedppSynnovis said that the data stolen is separate to the database which supports laboratory operations and holds the majority of test requests and resultsppIt has begun notifying organisations which had data stolen including NHS hospitals GP practices and clinics with the process expected to conclude by 21 November 2025ppThese providers will review copies of the stolen data to understand what it contains who it may identify and if individuals need to take any steps because of their data being impactedppNHSE said that once each organisation has assessed the impacted data they may contact patients via letters to individual patients a statement on their website or other forms of communicationppIn a statement Kings College Hospital NHS Foundation Trust said We have now received notification from Synnovis regarding the impact of the cyber attack on their systems and are the scope of affected datappWe are carefully reviewing and scrutinising all available information provided by Synnovis to fully understand the implications of the data breach and the specific data that may have been affectedppOnce our analysis is complete we will notify affected individuals where appropriateppIt added that the trust is committed to safeguarding patient and staff datappLast month cyber security expert Saif Abed founding partner at the AbedGraham Group called for a public inquiry into the Synnovis attack and urged NHS leaders to write to MPs requesting an investigation into NHS cyber security and patient safety following the critical incidentpp

Digital Health Digest

pp

Digital Health Main Newsletter List

pp

Intelligence Roundup List

pp

Digital Health Daily Newsletter


pp
First Name

pp
Last Name

pp
Email Address

pp
Job Title

pp
Organisation

pp

ppPrev NewsppNext NewsppYour email address will not be published Required fields are marked pp

ppppΔdocumentgetElementById akjs1 setAttribute value new Date getTime ppThis site uses Akismet to reduce spam Learn how your comment data is processedppDigital Health Intelligence LimitedRegistered Office 3rd Floor The Foundry 77 Fulham Palace Rd London W6 8JAppRegistered No 9257440Vat No 198 3531 71ppCopyright 2025 Digital Healthp