Patient dies after ransomware attack disrupts NHS pathology systems in June 2024

Summary

A patient's death was linked to a ransomware attack on Synnovis, a pathology services provider for the UK’s National Health Service, in June 2024. The ransomware group Qilin targeted the London-based clinic, disrupting pathology services at hospitals including King's College Hospital and Guy's and St Thomas' NHS Foundation Trusts. The attack crippled electronic health systems, causing delays in blood test results and leading to the cancellation of over 1,000 operations and appointments. A patient safety incident investigation confirmed that a delay in blood test results due to the cyberattack was one of several contributing factors to a patient’s death. The South East London Integrated Care Board reported 170 cases of patient harm, with two classified as severe. The ransomware group released 400 GB of sensitive patient data online after their ransom demands were not met.