NHS Ransomware Fallout Demonstrates Need for Cyber-risk Planning

A ransomware attack against a major IT provider for the NHS could take weeks or more to fix, according to software company, Advanced. The case serves as a cautionary tale about how disruptive cyber-crime can be for a business, even when targets are third-party vendors.

The cyber-attack occurred on 4th August, causing widespread outages across the NHS. The target of the attack was IT company Advanced, a software provider that serves multiple NHS departments. Services affected by the cyber-attack included patient referrals, ambulance dispatch, out-of-hours appointment bookings and mental health services.

Ransomware Attacks Explained

Ransomware is a form of malware designed to deny a user or organisation access to files on their network. Following an attack, cyber-criminals demand money in exchange for the release of stolen data or system recovery.

In this particular instance, seven of the NHS’ software systems were taken offline, including software that helps 111 call handlers dispatch ambulances and allows doctors to access patients’ GP records. It’s unknown if the NHS has presently engaged with the cyber-criminals’ demands.

Who is Behind the Attack?

Currently, no ransomware group has been named as the attacker. However, Russia is said to be linked to a majority of similar cyber-attacks worldwide. In fact, 74% of all money made through ransomware attacks in 2021.

went to Russia-linked hackers, according to research by cryptocurrency tracking and analytics firm Chainalysis.

The Impact on the NHS

The hacked software has caused significant disruptions to NHS services. For example, one affected software system, Adastra, enables clinicians to record medical information online and send this to a patient’s GP. While Adastra has been offline, staff have been writing medical notes on paper. Doctors predict it could take months to input the growing backlog of patient records once Adastra is restored.

Advanced reported the London and South Central Ambulance Services have since been reconnected to their system; other users will be brought back online on a rolling basis. However, it could take up to 12 weeks to get all services fully functional.


The cyber-attack on Advanced has significantly impacted the NHS and its patients. Such an attack demonstrates how devastating ransomware attacks can be and how long they can take to recover from, even when targets are third-party vendors. Therefore, it’s vital for organisations of all types and sizes to implement a comprehensive cyber-risk plan to mitigate any fallout from potential cyber-attacks. For more information on cyber-resilience, contact us today.


Legal Specific Disclaimer: 

The following information is not exhaustive, nor does it apply to specific circumstances. The content therefore should not be regarded as constituting legal or regulatory advice and not be relied upon as such. Readers should contact a legal or regulatory professional for appropriate advice. Further, the law may have changed since the first publication of this information.


The content of this Cover Overview is of general interest and is not intended to apply to specific circumstances. It does not purport to be a comprehensive analysis of all matters relevant to its subject matter. The content should not, therefore, be regarded as constituting legal advice and not be relied upon as such. In relation to any particular problem which they may have, readers are advised to seek specific advice. Further, the law may have changed since first publication and the reader is cautioned accordingly. © 2022 Zywave, Inc. All rights reserved.

RS Risk Solutions Logo

If you would like advice or a quotation please contact us.

We are an independent and regulated UK insurance broker predominantly supporting clients in:
London and the South East including: Surrey, Kent, East Sussex, West Sussex, Ashford, Bexhill, Brighton, Caterham, Chatham, Copthorne, Crawley, Crowborough, Croydon, Dorking, East Grinstead, Eastbourne, Edenbridge, Forest Row, Gillingham, Gravesend, Hastings, Haywards Heath, Heathfield, Horley, Horsham, Hove, Kingston upon Thames, Leatherhead, Lewes, Lingfield, Maidstone, Newhaven, Oxted, Redhill, Reigate, Royal Tunbridge Wells, Seaford, Sevenoaks, Sutton, Swanley, Tonbridge, Uckfield, Woking, Worthing

More Articles

Two Important Questions for Holiday Homeowners

High Net Worth Home Insurance

What is it and who needs it? A high net worth home insurance policy benefits homeowners who have particularly valuable assets, such as, an expensive

Summer Safety Tips - RS Risk Solutions

Summer Safety Tips

We’re notoriously grumpy when summer serves us grey skies and wet weather, but do we know how to stay safe when the sun does put in

Equipment Breakdown Insurance Solutions

Equipment Breakdown

We live and work in a world where technology is constantly evolving; creating new forms of machinery and equipment, and applications for them. Whilst technology

Employers’ Liability Guide

Employers’ Liability Insurance   The majority of employers in the UK are required to purchase employers’ liability insurance to cover against liability for injury or

Payment Card Industry Compliance

It has become commonplace for consumers to purchase goods and services with debit or credit cards rather than cash. However, this convenience may not only

Keeping Your Data Secure

Data security is crucial for all businesses. Customer and client information, payment information, personal files, bank account details—this information is often impossible to replace if

Motor Trade Insurance

The motor trade industry is expansive. It encompasses businesses that sell, repair, trade, enhance or test vehicles. As the owner of a motor trade business,

Motor Fleet Insurance

Managing your business’ fleet of vehicles—worth anywhere from a few thousand to millions of pounds—can seem like a Herculean task. As a fleet owner, you

RS Risk Solutions Logo

Request a callback

By providing the above information you consent to RS Risk Solutions Limited contacting you by any of the methods that you have provided details for. We will process this information in accordance with our privacy notice.

RS Risk Solutions uses cookies to monitor the performance of this website and improve user experience. To find out more about cookies, what they are and how we use them, please see our privacy notice, which also provides information on how to delete cookies from your hard drive.