\n The Norfolk and Norwich University Hospital (NNUH) is currently working to identify individuals whose data was breached in the attack by cyber-criminal group Qilin.\n<\/p>\n
\n It is believed tens of thousands of\u00a0patients\u2019 information were swiped in the hack on Synnovis \u2013 a third-party testing provider used by the NHS.\n<\/p>\n
\n Synnovis tests blood, tissue and other samples, and performs laboratory diagnostics for hospitals and GPs.\n<\/p>\n
\n Crime group Qilin\u00a0uploaded the stolen data onto the darknet, an area of the internet often used by criminals.\n<\/p>\n
\n Chris Cobb, NNUH acting executive managing director, said: “We have been notified by Synnovis that data linked to our Trust was included in the material accessed following the cyber-attack which occurred mid-2024.\n<\/p>\n
\n Chris Cobb, NNUH chief operating officer (Image: NUHH)\n<\/p>\n
\n “We are working to identify any individuals affected and are adhering to NHS England and Information Commissioner’s Office guidelines.”\n<\/p>\n
\n Hospital Trusts in Essex, Bedfordshire and London were also affected by the hack.\n<\/p>\n
\n Qilin claims\u00a0it targeted Synnovis as a way to punish the UK for not helping enough in an unspecified war.\n<\/p>\n
\n But the firm\u00a0said\u00a0the data was stolen “in haste and in a random manner” from its hard drives in an attempt to extort money.\n<\/p>\n
\n Action Fraud, the UK’s national reporting centre for fraud and cybercrime, has advised people to contact the organisation if someone claims to have their\u00a0data.\n<\/p>\n
Data breaches at Norfolk companies<\/p>\n
\n There was another data breach at a Norwich-based company, KLM UK Engineering<\/a>, in April when hackers gained remote access to a HR drive storing employees’ information and records.\n<\/p>\n \n An email sent from the firm’s managing director Wayne Easlea said the drive included personal and contact details, identification and national insurance numbers, car registrations, absence and health records, and bank details.\n<\/p>\n \n It is not known how many people were affected by the hack, but the company said it took “appropriate immediate containment actions”.\n<\/p>\n