Nearly 33,000 NHS Patients Caught Up in 2024 Ransomware Attack

Data breach at Bedfordshire Hospitals exposes personal info of 32,927 patients. Stay alert for suspicious activity.

Jun 4, 2026

ON THIS PAGE

Bedfordshire Hospitals NHS Foundation Trust has revealed that personal data belonging to 32,927 patients was stolen and published online following the June 2024 ransomware attack on pathology supplier Synnovis. The stolen files cover patients who had laboratory or diagnostic results between 2011 and 2020, and were later posted on online forums.

The data was fragmented, incomplete and scattered across multiple documents, and it took specialists over a year to piece together — Synnovis only notified the trust in October 2025. Exposed information may include names, dates of birth, patient and NHS numbers, postcodes and test results.

The trust says there's no evidence the data has been misused. It has reviewed the material with forensic advisers, notified the Information Commissioner's Office and NHS England, and tightened its oversight of suppliers. Patients are urged not to click links or attachments in unexpected messages, and to be wary of calls or emails asking for personal information.

Source: BBC News

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo

Want more insights like this?