Desk live·
ForensicPost
Ransomware/Fallback/File 24-0610

London Hospitals Moved to Universal O Blood After the Synnovis Attack

Losing the ability to type and cross-match forced London hospitals onto universal O blood, and a national appeal followed. The fallback worked, and it consumed the scarcest supply there is.

Constructed geometry · not a chart of case data
JurisdictionUnited KingdomLondonthe affected organisation’s jurisdiction, not the actor’s suspected origin
TargetSynnovis
ActorQilin
S. Rosler12 min readConfidence: high3 sources reviewed

Transfusion depends on knowing a patient’s blood group and cross-matching a unit to it. That is a laboratory function, and at the affected trusts the laboratory was encrypted.

The clinical response was to fall back on O-type blood, which can be given to almost anyone. NHS Blood and Transplant issued a national appeal for O donors, and reporting described one hospital asking its own staff to donate.

The Fallback Is Real And It Is Expensive

It works, which matters more than anything else here. But universal blood is the constrained part of the supply, and using it where a matched unit would have done draws down a national reserve to solve a local outage.

So the cost of the incident was partly borne by the blood service and by every other hospital drawing on the same stock. None of that appears in any figure attached to the attack.

This Is The Fallback Theme At Its Sharpest

The corpus argues that the organisations which limit damage do so with manual procedures inherited from a pre-automation era, that nobody tracks that capability, and that every efficiency programme reduces it.

Transfusion has an unusually good fallback because the clinical world thought about it long before anyone thought about ransomware. Universal donor blood exists for trauma, not for encrypted laboratories, and it happened to fit.

That is luck rather than planning, and it is worth saying plainly. Most functions have no equivalent — there is no universal pathology result, no O-negative radiology report.

How we reported this

Compiled from contemporaneous reporting and NHS Blood and Transplant statements, listed below. The clinical description of type-and-cross-match and universal donor use is general practice, not a finding about any individual case. No quantification of the additional O-type consumption attributable to the incident has been seen by this desk. Corrections: corrections@forensicpost.com.

Sources
  1. London hospitals face blood shortage after Synnovis ransomware attackBleepingComputer
  2. London hospital asking its own workers for blood after cyberattackFortune
  3. Synnovis restores systems after cyber-attack, blood shortages remainInfosecurity Magazine
S. Rosler
Covers extortion groups and leak-site economics. Verifies our sample sets.
// the chain of custody — tuesdays

Get the next file first.

One incident a week, taken apart properly. Logs, timelines, and what the filing left out.

PGP-signed edition · no tracking pixels · one-click unsubscribe
© 2026 ForensicPost Media · the desk · newsletter · searchGlossary