UK: National Heallth Service software supplier DXS hit by cyber attack

The UK-based software provider DXS, which helps to reduce costs for doctors and primary care physicians and is used by around 2,000 GPs overseeing the care of about 17 million patients, disclosed a security incident affecting its office servers.

In a filing with the London Stock Exchange, published on 18 December 2025, the company said it had discovered the breach on 14 December and had immediately contained it, working with the NHS and notifying law enforcement and regulators, including the Information Commissioner’s Office. There was minimal impact on the company’s services and the front-line clinical services remained unaffected and operational, according to the filing. On 15 December, Devman2 claimed responsibility for the attack and claimed that 300 GB of information was acquired, though the claims come without proof.