SOC status:Duty analyst on shift
Topic
14 articles tagged Healthcare.
Healthcare's week is defined by Boston Scientific's global network outage, the McKesson disclosure of roughly 284 million patient-related records exfiltrated via third-party applications, and Medusa ransomware passing 500 victims.
The healthcare vertical continues to be shaped by the Synnovis retrospective (7 London hospitals, June 2024, Qilin, still generating disruption two years on) and by the sustained 10x surge in IPS events across UK hospitals reported by SonicWall for Jan-May 2026 (264k events).
The healthcare vertical is in a sustained reconnaissance phase from the perspective of the attackers. SonicWall's mid-year data - 264,000 IPS events across UK hospital networks Jan-May 2026 versus 27,000 across the whole of 2025, a 10x surge - is the anchor statistic for the reporting period.
Coverage this period is dominated by the CISA KEV addition of CVE-2026-45659 (SharePoint deserialisation RCE), continued long-tail impact of the Synnovis / Qilin June 2024 attack on NHS South East London, and sustained ransomware activity by Qilin against healthcare-adjacent targets.
The dominant collection theme this period is continued aftermath reporting from the June 2026 London hospital ransomware incident, edge-appliance exposure introduced by the 23 June Ubiquiti UniFi OS KEV addition (operationally significant for hospital estates with widespread UniFi deployment)…
During the reporting period the principal observations were the continuing strategic consequence of the June 2024 Synnovis / NHS London pathology compromise - South London and Maudsley NHS Foundation Trust pathology systems remained partially un-restored into early 2026…
The healthcare-sector collection picture this week sits against the Health-ISAC 2026 Global Health Sector Threat Landscape Report's documented 55% surge in incidents through 2025 and its identification of Qilin, INC Ransom and SAFEPAY as the most active ransomware groups targeting health entities.
The healthcare collection picture this week has been shaped by the Health-ISAC 2026 threat-landscape report's continuing emphasis on Qilin, INC Ransom and SAFEPAY as the most active groups targeting health entities, with AI-enabled attack tactics flagged as the number-one concern for the year.
The vertical continues to absorb sustained ransomware and supply-chain pressure: the Synnovis pathology incident's twelve-month follow-on disclosure recorded 122 patient-safety incidents and a patient death assessed as cyber-attack-contributing at King's College Hospital…
The reporting cycle has been shaped by Health-ISAC's continued elevation of ransomware as the \#1 threat to healthcare (455 health-sector ransomware incidents globally in their 2026 retrospective)…
During the reporting period 11 May 2026 – 17 May 2026 the healthcare threat picture remained dominated by ransomware impact on NHS and private-healthcare estates…
The healthcare threat picture for the reporting period continues to escalate.