Sensitive data stolen from an NHS provider in a recent cyber attack has been published online by a criminal group.
NHS England has confirmed that a criminal group claims to have released patient information hacked from Synnovis, a company that provides pathology services on blood tests.
Synnovis, which primarily serves southeast London, was targeted in a ransomware attack believed to have been carried out by the Russian group Qilin on June 3.
In a statement released on Friday morning, NHS England said: “NHS England has been made aware that the cybercriminal group published data last night which they are claiming belongs to Synnovis and was stolen as part of this attack.
We understand that people may be concerned by this and we are continuing to work with Synnovis, the National Cyber Security Centre, and other partners to determine the content of the published files as quickly as possible.
This includes whether it is data extracted from the Synnovis system, and if so whether it relates to NHS patients.
As more information becomes available through Synnovis’ full investigation, the NHS will continue to update patients and the public.”
The cyber attack has raised significant concerns about the security of patient information and the potential impact on those whose data may have been compromised.
The National Cyber Security Centre is involved in the ongoing investigation to understand the scope of the breach and mitigate any further risks.
Patients and the public are urged to stay informed through official NHS updates as the situation develops.