DXS International, a healthcare technology provider for the NHS in England, reported a cyberattack that occurred on December 14. The company revealed the breach in a statement to the London Stock Exchange, noting it involved a security incident affecting its office servers. DXS stated they quickly contained the breach and hired a cybersecurity firm to assess the situation. They claimed that their clinical services remained operational and minimally impacted. The hackers, a ransomware group called DevMan, took responsibility for the attack and claimed to have stolen 300 gigabytes of data. DXS has not confirmed the specifics of the breach or whether any patient medical information was compromised. They informed law enforcement and the Information Commissioner’s Office (ICO) about the incident. While the ICO is evaluating the information from DXS, NHS England has stated that they are not aware of any disruptions to patient services. DXS’s software interacts with patient records, which raises concerns about the potential impact of the breach. The company’s systems sometimes operate on the NHS’s Health and Social Care Network (HSCN), a platform for sharing healthcare information across the U.K. The NHS does not maintain a centralized database for patients' medical data, which adds complexity to assessing the breach's implications.