In June 2024, a tragic incident occurred. The NHS investigated and found that a hacker group launched a cyber - attack on Synnovis, a third - party pathological service provider. Synnovis, which cooperates with the UK's NHS and mainly provides medical services such as blood tests, became the victim of the attack, resulting in serious consequences.
The hacker group adopted a double - extortion strategy. They first encrypted and stole Synnovis' internal files, and then threatened to disclose sensitive information. This led to the collapse of Synnovis' information system, and key medical data could not be transmitted in time. As a result, many medical institutions, including university teaching hospitals, were successively attacked, and the medical system in the southeastern part of London was paralyzed.
The impact of the cyber - attack was huge. A large number of general practitioner clinics were unable to make blood test appointments for patients. Some medical institutions even considered restricting the blood test needs of non - critical patients. It is reported that it took an average of more than 3 weeks for the affected institutions to fully resume normal diagnosis and treatment processes.
Regrettably, a patient's follow - up treatment was forced to be interrupted due to the long - delayed blood test results, and the patient eventually died unfortunately. Medical experts analyzed that this cyber - attack was the direct cause of the patient's death. This is the first globally confirmed incident where a cyber - security accident led to a patient's death, which has attracted widespread attention.
This incident highlights the vulnerability of the medical system in the face of cyber - attacks. As medical systems become more and more dependent on real - time data transmission, the threat of cyber - attacks is becoming more and more serious. It is urgent for relevant departments to strengthen network security protection to ensure the normal operation of the medical system and the safety of patients.
