Synnovis

A June 2024 ransomware attack on Synnovis disrupted pathology across south-east London, postponed thousands of appointments and procedures, constrained transfusion matching and helped drive extraordinary demand for O-type blood. Stolen working-drive data then created a separate, year-long reconstruction and notification problem. The accountability test is whether a concentrated clinical supplier and its NHS partners can prove safe degraded operation, measured patient impact, durable repair and resilience that extends beyond the return of servers.

Synnovis is a risk and accountability case because its 2024 ransomware incident showed how an attack on a specialist pathology provider can become a clinical-continuity event across hospitals, general practice, laboratories, transfusion services, patient communication, data protection, and public confidence in outsourced health infrastructure. The public record matters for patients, clinicians, NHS leaders, pathology suppliers, regulators, cyber insurers, and public officials because the incident was not only a technical outage. It was a test of whether a health system that depends on a concentrated diagnostic supplier can keep care moving, explain data risk, restore services by clinical priority, and account for harm without inventing facts that are not yet public.