Synnovis Confirms Patient Information Stolen in Disruptive Ransomware Attack

Synnovis has confirmed that patient personal information was stolen in a ransomware attack that disrupted operations at several London hospitals. The attack occurred on 3 June 2024 and affected all IT systems, forcing hospitals to cancel operations. On 20 June 2024, the Qilin ransomware gang claimed responsibility for the attack and published roughly 400 gigabytes of data allegedly stolen from Synnovis.

The compromised data includes names, dates of birth, and NHS numbers, with test results also affected in some cases, and it appeared in a variety of formats. Synnovis says it did not pay a ransom and took steps to limit the impact, including obtaining an injunction to protect patients and prevent further publication of the data.

The organisation continues to work with authorities and expects the notification process to be completed by 21 November, with organisations rather than individual patients informed directly.