INCIDENT REPORT · CP-2024-006
Synnovis pathology ransomware attack on London hospitals
L4 · CRITICALCONFIRMED
On 3 June 2024, a ransomware attack on Synnovis, a pathology services provider for south east London NHS trusts, affected almost all of its IT systems.
- Incident ID
- CP-2024-006
- Incident date
- 03 JUN 2024
- Detection date
- 03 JUN 2024
- Affected countries
- United Kingdom
- Plotted location
- London, United Kingdom (Affected organizations (Synnovis and partner NHS trusts))
- Threat classification
- Level 4 — CRITICAL
- Classification rationale
- Significant disruption to essential hospital services, including blood transfusion and surgery, in a major city.
- Attack type
- Ransomware
- Nature
- Malicious activity
- Attack vector
- Not publicly documented
- Sectors
- Healthcare
- Critical infrastructure
- Yes
- Organizations affected
- Synnovis, King's College Hospital NHS Foundation Trust, Guy's and St Thomas' NHS Foundation Trust, GP services in south east London
- Operational consequences
- Blood testing fell to a fraction of normal capacity and hospitals had to use O-type blood for urgent transfusions. Over 1,100 operations and 2,000 outpatient appointments were postponed in the early weeks, and about 400 GB of data was leaked.
- Estimated financial impact
- No reliably documented figure
- Attribution (as stated)
- No official attribution recorded
SOURCE REFERENCES
- [1] Care disrupted at London hospitals due to ransomware attack on pathology vendorHIPAA Journal · hipaajournal.com
- [2] Qilin Ransomware Group Leaks NHS DataGovInfoSecurity · govinfosecurity.com
RECORD CREATED 14 NOV 2026 · LAST UPDATED 14 NOV 2026 · Threat levels are editorial assessments, not official government ratings.