---
title: "Tech provider for NHS England confirms data breach"
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/270187446.md"
description: "DXS International, a tech provider for NHS England, disclosed a cyberattack affecting its office servers. The breach, discovered on December 14, was contained with NHS collaboration, and a cybersecurity firm is investigating. A ransomware group, DevMan, claimed responsibility, alleging theft of 300GB of data. DXS notified law enforcement and regulators, including the ICO. The breach had minimal impact on services, and NHS patient services remain unaffected. DXS software, which interacts with patient data, is sometimes hosted on the NHS' Health and Social Care Network."
datetime: "2025-12-18T16:12:38.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/270187446.md)
  - [en](https://longbridge.com/en/news/270187446.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/270187446.md)
---

> Supported Languages: [简体中文](https://longbridge.com/zh-CN/news/270187446.md) | [繁體中文](https://longbridge.com/zh-HK/news/270187446.md)


# Tech provider for NHS England confirms data breach

DXS International, a U.K.-based company that provides healthcare tech for England’s National Health Service (NHS), disclosed a cyberattack in a statement on Thursday.

In a filing with the London Stock Exchange, the company said it experienced a “a security incident affecting its office servers,” discovered on December 14. The company said it “immediately” contained the breach working together with the NHS, and hired a cybersecurity firm to investigate “the nature and extent of the incident.”

“There was minimal impact on the company’s services and the company’s front-line clinical services remain unaffected and operational,” read the filing.

At this point, the specific nature of the breach is not known, nor whether any patients’ medical information was stolen.

However, earlier this week, a ransomware group called DevMan took credit for the breach. In a post on its dark web site, which TechCrunch has seen, the hackers listed the company on December 14 and claimed to have stolen 300 gigabytes of data from the company.

DXS said it also notified law enforcement and regulators, including the UK’s data protection authority, the Information Commissioner’s Office, or ICO, about the cyberattack.

#### Contact Us

Do you have more information about the breach at DXS International? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email.

NHS England spokesperson Katie Baldwin told TechCrunch that the health service is “not aware of any patient services being impacted.”

Representatives from DXS and the ICO did not immediately respond to a series of questions sent by TechCrunch.

On its website, DXS says it provides software that helps to reduce costs for doctors and primary care physicians. As such, the company’s software touches patient records and data. The company also says that in some cases, its solutions are hosted on the NHS’ Health and Social Care Network (HSCN), which is a system for healthcare organizations across the U.K. to access and share information.

Generally speaking, the NHS does not store patient’s medical data in a centralized system.

## Related News & Research

- [GXO Expands Partnership with NHS England | GXO Stock News](https://longbridge.com/en/news/280985508.md)
- [There’s Been A Staggering Number Of Deaths In ICE Custody During Trump’s Second Term](https://longbridge.com/en/news/281293924.md)
- [ZAWYA: Cambridge Health Group announces 70 bed expansion of Cambridge Hospital Jeddah](https://longbridge.com/en/news/281484041.md)
- [SkyHope Appoints Aviation Industry Leader Bradley D. Mottier to Board of Directors](https://longbridge.com/en/news/281651021.md)
- [15:00 ETMercy Expands Primary Care Network with New Community Physician site in Westminster](https://longbridge.com/en/news/281231010.md)