Synnovis (NHS pathology) data breach
Was I affected?
Synnovis (NHS pathology) confirmed a breach affecting an undisclosed number of people, exposing names, dates of birth and medical information. You may be affected if you had blood or other lab tests processed through Synnovis (e.g. via King's College Hospital, Guy's and St Thomas' or local GPs); your NHS trust or GP, not Synnovis, will contact you.
| Announced | Jun 4, 2024 |
|---|---|
| When it happened | June 3, 2024 |
| Data exposed | Names, Dates of birth, Medical information and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
A Qilin ransomware attack on Synnovis, which runs pathology labs for several south-east London NHS trusts and GP practices, disrupted blood tests and operations in June 2024 and the stolen data was later published. Files included patient names, dates of birth, NHS numbers and some test information. Synnovis finished its review in November 2025 and is telling NHS organisations whose patients were affected; independent analysts estimated around 900,000 people.
What should I do?
- Treat emails, texts and calls that mention NHS test results or appointments as suspect; don't click links or share codes, and contact the company through its official app or website.
- Never give bank details to anyone calling about NHS records; hang up and call your GP or hospital on a known number.
- Report scams or fraud to Action Fraud (actionfraud.police.uk) or call your bank on the number on your card.
Check the other services you use →
Sources
- Synnovis cyber incident · NHS England (official)
- NHS supplier ends probe into ransomware attack that contributed to patient death · The Register (news)
- Synnovis notifies of data breach after 2024 ransomware attack · BleepingComputer (news)