Ransomware attack at Synnovis Throws >3000 UK Hospitals into Chaos
Synnovis was hit by a ransomware cyber-attack on Monday 3 June 2024. NHS reports that this attack has caused significant disruption in south east London across a range of different treatments. The hackers injected malware into Synnovis’s IT system, which locked the entire computer system until a ransom was paid to regain control and remove the ransomware. Over 3,000 hospital and GP appointments were thrown into chaos as a direct result. Synlab, the parent company of Synnovis, experienced a total of three significant cyber security breaches in the past year.
UPDATE May 2025: More than 11 months after a ransomware attack, the affected patients still have not been informed about what data of theirs was exposed in the incident, with material about sexually transmitted infections and cancer cases being included in the leaks.
Incident Date
June 3, 2024
Location
Estimated Cost
400GB data stolen; $50 million ransom; appointments and operations were canceled.
References
- Patients left in the dark months after cybercriminals leak testing lab data
- Patients left in the dark months after cybercriminals leak testing lab data
- Criminal gang behind London hospitals cyberattack lists victim on darknet site
- NHS confirms patient data stolen in cyber attack
- Synnovis Ransomware Cyber-Attack
Industries
Impacts
OT IT Privacy