DXS International, a tech provider for NHS England, reported a cyberattack that compromised its office servers. A ransomware group claimed responsibility, alleging they stole 300 gigabytes of data, though the extent of the breach and any impact on patient information remains unclear.

Cybercriminals infiltrated NHS Professionals in May 2024, stealing its Active Directory database without public disclosure. Despite NHSP's claims of no data compromise, internal reports indicated significant breaches and vulnerabilities, prompting recommendations for enhanced cybersecurity measures, including multi-factor authentication and endpoint detection solutions.