United Kingdom
GBR
Synnovis ransomware disrupts pathology; 11,000+ NHS appointments delayed
On 03 June 2024, pathology provider SYNNOVIS was hit by ransomware that significantly reduced its capacity to process tests, with the greatest impact in South‑East London. NHS England reported delays to over 11,000 outpatient and elective appointments and widespread service disruption at partner trusts; data stolen in the attack was later confirmed. Independent reporting linked at least one patient death to delayed test results during the outage.
90
Estimated severity
90 / 100
95
Source reliability
95 / 100
Approximate Date
03/06/2024
Targeted Company
SYNNOVIS
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
GUYS AND ST THOMAS NHS FOUNDATION TRUST (Downstream customer)KINGS COLLEGE HOSPITAL NHS FOUNDATION TRUST (Downstream customer)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United Kingdom
Affected countries
United Kingdom
Impacted regions
England · United Kingdom
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service unavailabilityService degradationOperational disruptionDownstream customer disruptionSafety impact
Affected sectors
Healthcare & Public Health
Affected departments
Information Technology
Attack Profile
Attack types
RansomwareData exfiltrationData breachExtortion
Attributed threat actors
QILIN
Sources
Incident Sources
england.nhs.ukhttps://www.england.nhs.uk/synnovis-cyber-incidentengland.nhs.ukhttps://www.england.nhs.uk/synnovis-cyber-incident/questions-and-answersbbc.comhttps://www.bbc.com/news/articles/cp3ly4v2kp2oinfosecurity-magazine.comhttps://www.infosecurity-magazine.com/news/patient-death-linked-nhs-cyberinfosecurity-magazine.comhttps://www.infosecurity-magazine.com/news/synnovis-breach-notification-2024