Another NHS trust says the Qilin attack on Synnovis exposed patient records two years after the breach

Mid and South Essex NHS Foundation Trust says the 2024 Qilin ransomware attack on pathology provider Synnovis exposed about 2,380 records tied to specialist diagnostic testing, and the total may rise as records are matched to individual patients. The incident is the same long-running data theft and service-disruption event that hit NHS pathology services in southeast London on June 3, 2024; patient data was later published after failed extortion, and affected trusts are still identifying who must be notified.
Why it matters: This shows the fallout from a major healthcare ransomware breach is still growing years later, with more patients and hospitals discovering exposed records. Affected NHS organizations need to keep tracing exposed data and notifying people, while patients contacted about past diagnostic testing should treat breach notices seriously and watch for scams or misuse of their information.

Sources

Qilin NHS breach tally grows as Essex trust confirms stolen records
2026.06.09 100% relevant
The article establishes a trackable development in the Synnovis/Qilin NHS breach by adding a newly confirmed affected trust and record count, showing the incident's victim scope is still expanding.
← Back to all stories