Qilin Encryption of Synnovis Cancelled 10,000 Appointments and 1,700 Operations

On 3 June 2024 the Qilin ransomware operation encrypted Synnovis, a pathology partnership providing blood sciences, microbiology and diagnostics to two of the largest NHS trusts in London.

Synnovis is not a hospital. It is the laboratory the hospitals send samples to, and both trusts send samples to the same one.

Almost everything. A blood test result gates a discharge, an anaesthetic, a transfusion, a chemotherapy dose. Without the result the decision cannot be made safely, so the procedure waits.

Reported figures put the disruption at more than 10,000 outpatient appointments and 1,710 operations postponed across the two trusts. Those are not records lost. They are appointments that did not happen to people who were already waiting.

The corpus files repeatedly that the breach happens somewhere the affected person has never heard of. A patient at King’s or Guy’s has a relationship with the hospital, not with the pathology partnership behind it, and could not have evaluated it if they had wanted to.

Consolidating two trusts’ diagnostics into one provider is efficient and is exactly why one intrusion reached both. This desk records that trade-off without pretending the alternative is free: duplicated laboratories cost money that a health service does not have.

Systems were restored over subsequent months and reporting has described disruption persisting well beyond the incident itself. The corpus recorded the same distinction at 25-1008: restarting is not the same as recovering.