Synnovis ransomware attack disrupts London hospital care and leaks patient data
UK pathology provider Synnovis was hit by a ransomware attack in 2024 that disrupted transfusions, surgery and care at London hospitals. Patient names, dates of birth, NHS numbers and test results that could be linked to some individuals were stolen, and more than 900,000 patients were affected. Hospitals used paper records, and after finishing its analysis of the stolen data, Synnovis began notifying affected healthcare organisations in November 2025.
Key facts
- Affected organisation
- Synnovis
- Incident type
- Ransomware
- Occurred / detected
- Not confirmed
- Scale of damage
- More than 900,000 patients affected; about 1,600 surgery and care appointments cancelled in one week
- Cause / method
- Qilin ransomware attack
- Location
- United Kingdom
If your data was exposed
Exposed dataNameDate of birthHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The Synnovis ransomware attack disrupted transfusions and medical services at London hospitals.
- About 1,600 surgery and care appointments were cancelled in one week.
- The attackers published blood test data they had stolen.
- The number of patients affected by the attack was tallied at more than 900,000.
- Synnovis finished analysing the data and began notifying affected healthcare organisations that patient data had been stolen.
- It was further confirmed that records of thousands of NHS patients in Essex had also been stolen.
Also affected by this incident
Synnovis cyber-attack leaks thousands of Essex NHS patient records
↳ Knock-on damage from the Synnovis incident · View original incidentImpact: Thousands of patient records
Thousands of patient records from Mid and South Essex NHS Foundation Trust were stolen in the Synnovis cyber-attack. The trust informed patients that their information had been stolen.
Related reports: 3 · last report →
38 related reports
- Major London hospitals disrupted by Synnovis ransomware attack
- Services disrupted as London hospitals hit by cyber-attack
- London Hospitals Hit by Cyberattack Impacting Blood Transfusions
- NHS operations cancelled amid major cyberattack at London hospitals
- Synnovis CEO confirms ransomware attack at London hospitals
- NHS Cybersecurity — London hospital services disrupted and cancelled amid ransomware attack
- London NHS hospitals revert to paper records after cyber-attack
- London Hospitals Face Major Disruptions After Cyberattack (Published 2024)
- London Healthcare Still Paralyzed by Synnovis Ransomware Attack
- London hospitals cancel cancer surgeries after cyber-attack | NHS
- ‘Life-saving’ operations cancelled by NHS hospitals after cyberattack
- Cyber-attack on London hospitals to take ‘many months’ to resolve
- London hospitals cancel nearly 1,600 operations and appointments in one week due to hack
- NCSC statement following reports of a Synnovis data breach
- London hospitals hackers publish stolen blood test data
- Qilin ransomware attack on Synnovis impacted over 900,000 patients
- Ransomware costs at NHS provider Synnovis far outstrip profits
- The Synnovis cyber-attack: A warning for healthcare providers
- Synnovis Notifying UK Providers of Data Theft in 2024 Attack
- Synnovis to notify NHS of data breach after nearly 18 months
- Synnovis notifies of data breach after 2024 ransomware attack
- Synnovis Confirms Patient Information Stolen in Disruptive Ransomware Attack
- Former NCSC Head: Synnovis Ransomware Cyber Attack Caused by Trilogy of Issues
- Japan hands over ‘Qilin’ hacker group member to Germany
- World's Largest Ransomware Group Qilin Member Arrested in Japan
- Japan hands over Russian ransomware suspect to Germany
- Japan collars fugitive suspect of ransomware syndicate Qilin
- Japan extradites suspected Qilin ransomware 28y Russian member to Germany amid rising cybercrime records
- 53 companies in Japan hit by Qilin ransomware group
- Japan extradites Russian man to Germany over role in Qilin ransomware group
- 53 companies in Japan hit by Qilin ransomware group: police agency
- Germany Arrests Suspected Qilin Ransomware Leader After Japan Detention
- Germany arrests alleged core Qilin ransomware member after extradition
- Alleged Qilin ransomware leader extradited from Japan to face charges in Germany
- Japan's Keio Corporation Confirms Ransomware Group "Qilin" Claims Data Release
- Russian man linked to deadly London hospitals hack arrested
- Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient's death
- Synnovis ransomware attack, patient died and alleged Qilin member extradited to Germany
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.