This page is for primary care professionals. It has the latest information and materials from NHS South East London ICB about the Synnovis cyber-attack in early June 2024.
For Synnovis critical incidents please report via this form or the QR Code below:
Below you can find information shared in the south east London wide primary care communications sorted by theme. If you have further queries, please get in touch with pccentralteam@selondonics.nhs.uk.
In this tab you will find links to the latest statements available on different parts of the cyber attack.
Latest NHSE statement on impact (25 July 2024)
Latest NHSE statement on data and investigation status (24 June 2024)
Latest Synnovis statement (25 July 2024)
Potential harms monitoring – guidance and form
We have developed and updated the guidance for raising quality alerts and patient safety issues after constructive feedback from primary care and the LMC. The guidance has been updated and the form where you can raise quality and patient safety issues arising from the Synnovis Cyber attack is here.
In this section:
As part of our plan to restore services, we have been working across London with other pathology services. All boroughs now have mutual aid arrangements in place from Monday 24 June; these mean that all practices now have access to critical and urgent testing. These arrangements have been established as quickly as possible. We will continue to work to develop these arrangements as the impact from the incident continues.
We have been working to minimise changes to existing arrangements as much as possible, but there are likely to be some changes to testing regimes, test catalogues and reference ranges that arise from the change to a new pathology provider. We will continue to provide guidance as these arrangements develop.
To continue to support practices to use mutual aid, you can find up to date mutual aid packs for each borough below:
In this section:
Below are some recordings and slides from briefings held by the ICB for practices.
To continue to support practices to prioritise pathology tests, our team has updated the guidance issued last week. You can find the updated guidance here.
The guidance particularly provides more information about pathology around cancer treatment.
We have developed and updated the guidance for raising quality alerts and patient safety issues after constructive feedback from primary care and the LMC. The pack has been updated and on page 3 of the pack, you can find a link to the form where you can raise quality and patient safety issues arising from the Synnovis Cyber attack. The guidance is here.
To support people who take medication that requires regular blood tests, the medicines optimisation team are working with GPs and specialists to develop clinical guidance that applies across primary and secondary care. This is being released in batches as it is developed. You can find the current guidance here.
To help communicate the impact of the incident on the care of your patients, the following may be helpful to use when asked queries by patients: “Your regular blood testing for prescribed medication may be reduced or paused as a result of the cyber attack in South East London which is affecting blood testing capacity. Any reduction or pausing of blood testing will be considered by your specialist or your GP on an individual basis. This will ensure people with the greatest need are prioritised for testing and that you can safely continue taking your medication. If your regular blood tests are delayed, your specialist or GP will ensure you are called for a blood test at the earliest possible time.
If you have any questions, please discuss with your healthcare professional.”
We recognise the impact that this will have for our practices in relation to capacity, workforce and provision of care. To ensure we support practices as well as we are able, we have secured financial support (20 June 2024) for practices.
Once Synnovis has communicated the cancellation of these tests to general practice, general practice will need to undertake a clinical review of each patient to ascertain the impact of the cancellation and the follow-up actions required to minimise risk to the patient.
We are aware that practices have had to inform and notify patients of the recent Synnovis incident which may have involved utilising Accurx fragments. Please continue to use this method of contacting patients if appropriate but at the same time record the number used for this purpose during this period for future reference. A local template named Synnovis Incident could be used. Click here to access the webpage showing how to create the template.
In this section:
Synnovis and mutual aid providers have raised issues with the quality of printed labels on samples being submitted. To ensure that no samples need to be returned over the coming weeks, we would ask practices to help by:
Following the transfer of the urgent pathology service to HSL we have been asked to clarify how practices can raise their orders for non-urgent/routine tests and the link with Ardens template.
Non-Urgent Tests: Practices should use the HSL T-quest link to order the routine tests and print off the form and give to the patient. However, we would ask practices to ensure that patients are advised there is no current service available to undertake routine testing and that they should wait to be contacted before booking/attending for phlebotomy. Practices will need to record the due test delayed using the Ardens protocol indicating level of priority which will then be used at a later date to risk stratify and recall.
We have been working with Ardens to set up two support tools to help record delayed tests in SEL due to the cyber attack.
There are two main components as follows:
Here you can find some initial guidance and further information from Ardens on the updates.
It is important that any test results, manually added to patient records during this period, are entered consistently. It is therefore recommended that you use the following Ardens template: “Blood results (v17.9) (Ardens)”.
We want to remind practices that as they have been directly affected by this cyber attack that they are at increased risk of being targeted. This could be in the form of further ransom demands, phishing attacks (to try and gain login credentials or sensitive information) or others. Please continue to be vigilant and report any phishing or spam emails by sending to spamreports@nhs.net or via Outlook the Report Phishing button. Any other issues or concerns, please contact:
Email: ICT@selondonics.nhs.uk, SEL ICT Tel: 020 8176 5400 or use the Self Service Portal: https://nhssel.haloitsm.com/portal/home.
You can find some tips on how to increase cyber/security awareness in your practice here.
All phlebotomy appointments for clinics which feed into Synnovis services have been postponed. We have split the arrangements below out by borough.
Under mutual aid arrangements, for critical and urgent tests, patients in each borough should go to:
Gracefield Gardens, 2-8 Gracefield Gardens, London, SW16 2ST
From Thursday 13th June: 8:00 – 17:00
Last patient entry: 16:45
Tessa Jowell Health Centre, 72H East Dulwich Grove London SE22 8EY
Friday 14th June: 7:30 – 15:30
Last patient entry : 15:15
An urgent blood test request pathway exists via the Community Phlebotomy Service run by Bromley GP Alliance (BGPA). Urgent referrals should be made via email to selicb.bgpa.phlebotomy@nhs.net. BGPA will manage the booking and contact the referrer and patient by phone with the appointment date and time.
Bexley, Greenwich and Lewisham
Patients requiring critical blood tests can visit the following sites from Monday to Friday. Please ensure you have typed ‘urgent’ onto their tQuest form before printing it and handing it to them.
Thank you to all practices across south east London for your help and support with managing the media messaging on this cyber attack. If your practice is approached directly by a media outlet on the Synnovis cyber attack and ongoing incident, please contact media@selondonics.nhs.uk for advice and support. We can help to manage the response and the query for you.
To support practices, we have updated the GP communications toolkit. The toolkit has been produced to help support consistent messaging to avoid unnecessary confusion and anxiety for patients and staff. This contains:
If there are further materials you would like to be included, please contact us at communications@selondonics.nhs.uk.
On 3 June, Synnovis, a pathology laboratory which processes blood tests on behalf of a number of NHS organisations, primarily in South East London, was the victim of a cyber attack.
NHS England has been made aware that the cyber criminal group published data which was stolen as part of this attack.
We understand that people may be concerned by this and we are continuing to work with Synnovis, the National Cyber Security Centre and other partners to determine the content of the published files as quickly as possible. There is a page of frequently asked questions which can provide more information.
As more information becomes available through Synnovis’ full investigation, the NHS will continue to update patients and the public here (guidance on cyber security is also available through this link).
The attack is being investigated by law enforcement agencies.
