NHS providers reviewing stolen Synnovis data published by cyber criminals

NHS providers are reviewing stolen Synnovis data that was published online by cyber criminals after a major cyber-attack last year. The pathology supplier Synnovis is contacting NHS organisations whose data were compromised, including data that was made public on 20 June 2024, as part of the incident.

The ransomware attack on 4 June 2024, which led to a patient death, caused widespread disruption to NHS services in London, with thousands of delayed appointments at King’s College Hospital NHS Foundation Trust and Guy’s and St Thomas’ NHS Foundation Trust, and delays to blood testing in primary care.

Synnovis has completed its forensic review of patient and staff data published online, which includes personal data such as names, NHS numbers, test results and test codes indicating the nature of tests requested, along with information from the firm’s administrative working drive. Mark Dollar, chief executive at Synnovis, said the investigation has taken more than a year of painstaking effort to decipher and piece together the data stolen in this smash-and-grab cyberattack.