Synnovis

A ransomware attack on Synnovis, a pathology services provider for several NHS hospitals in London, led to widespread disruption of diagnostic services and the death of a patient. The attack, carried out by Qilin, a Russian cybercriminal group, delayed blood test results and caused significant harm to patient care. Over 10,000 appointments were disrupted, 1,710 operations postponed, and 1,100 cancer treatments delayed. The attack was linked to nearly 600 patient safety incidents, including two cases of severe harm.

Source: https://www.infosecurity-magazine.com/news/patient-death-linked-nhs-cyber/

TPRM report: https://scoringcyber.rankiteo.com/company/viapath-llp

"id": "via625062825",
"linkid": "viapath-llp",
"type": "Ransomware",
"date": "6/2025",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'London',
                        'name': 'Synnovis',
                        'type': 'Pathology services provider'},
                       {'industry': 'Healthcare',
                        'location': 'London',
                        'name': 'King’s College Hospital NHS Foundation Trust',
                        'type': 'Hospital'},
                       {'industry': 'Healthcare',
                        'location': 'London',
                        'name': 'Guy’s and St Thomas’ NHS Foundation Trusts',
                        'type': 'Hospital'}],
 'date_detected': '2024-06-03',
 'description': 'A ransomware attack on Synnovis, a pathology services '
                'provider for several NHS hospitals in London, caused '
                'widespread disruption to diagnostic services, delaying blood '
                'test results and leading to significant harm to patient care, '
                "including a patient's death.",
 'impact': {'operational_impact': ['Disrupted 10,152 outpatient appointments',
                                   'Postponed 1710 elective procedures',
                                   'Delayed 1100 cancer treatments',
                                   '170 cases of patient harm recorded',
                                   '2 cases classified as severe'],
            'systems_affected': ['Pathology services',
                                 'Blood testing services']},
 'recommendations': ['Use multi-factor authentication (MFA)',
                     'Patch known system vulnerabilities',
                     'Maintain support for digital infrastructure',
                     'Keep secure, immutable backups of essential data'],
 'references': [{'source': 'Infosecurity'}],
 'threat_actor': 'Qilin',
 'title': 'Ransomware Attack on Synnovis',
 'type': 'Ransomware'}