UK health service hit by ransomware, amid possible global attack on systems

An apparent cyberattack with the motivation of extortion has hit hospitals across England, taking down systems for appointments. Patients are being turned away unless it’s an emergency.

Pictures appearing on Twitter showed screens of NHS computers with ‘ransomware’ images demanding payment of $300 worth of Bitcoin, saying: “Ooops, your files have been encrypted!”

BBC tech editor Rory Cellan-Jones tweeted a picture sent to him by a doctor (posted above) reporting “what a London GP sees when trying to connect to the NHS network.”

Hospitals affected stay they are shutting down all computer systems as a protective measure.

NHS Digital, which runs the booking platform, claimed there was no evidence patient data has been compromised. It said the attack was believed to be carried out by the malware variant Wanna Decryptor and it is now working with the National Cyber Security Centre, the Department of Health and NHS England over the attack.

The BBC reports that up to 25 NHS organisations and some GP practices have been affected.

Britain’s National Health Service is a treasured institution and is free for anyone to access, but has ben hit by substantial budget cuts and clearly runs inadequate security systems.

Techcrunch event

Disrupt 2026: The tech ecosystem, all in one room

Your next round. Your next hire. Your next breakout opportunity. Find it at TechCrunch Disrupt 2026, where 10,000+ founders, investors, and tech leaders gather for three days of 250+ tactical sessions, powerful introductions, and market-defining innovation. Register now to save up to $400.

Save up to $300 or 30% to TechCrunch Founder Summit

1,000+ founders and investors come together at TechCrunch Founder Summit 2026 for a full day focused on growth, execution, and real-world scaling. Learn from founders and investors who have shaped the industry. Connect with peers navigating similar growth stages. Walk away with tactics you can apply immediately

Offer ends March 13.

San Francisco, CA | October 13-15, 2026

It’s too early to tell, but the attack may be part of a much larger one globally.

A malware researcher at Avast is reporting on Twitter that there have been 36,000 detections of Wanna Decryptor globally including in Russia, Ukraine and Taiwan.

Topics

,
Loading the next article
Error loading the next article