Article Details
Scrape Timestamp (UTC): 2025-12-18 13:09:59.172
Source: https://www.theregister.com/2025/12/18/nhs_tech_supplier_cyberattack/
Original Article Text
Click to Toggle View
NHS tech supplier probes cyberattack on internal systems. Around 2,000 GP practices use its products. An NHS tech supplier is investigating a cyberattack that affected its systems in the early hours of Sunday. DXS International, which provides tools to NHS trusts to tackle appointment referral errors and prescriptions, disclosed the "security incident" to the London Stock Exchange on Thursday morning. The attack affected its office servers but was immediately contained by its own IT staff, and those working for NHS England, the statement says. A third-party digital forensics company is now investigating the case to understand the full scope and nature of the attack. DXS says there was minimal impact on its products, and its frontline clinical services remained operational throughout. "The company has notified the relevant regulators, authorities, and law enforcement agencies, including the Information Commissioner's Office, and various NHS bodies, and is fully cooperating with their investigations." The Register contacted both DXS and the NHS to understand the impact on patient care across the UK. DXS does not publicly disclose how many NHS customers it supports in total, and it did not immediately respond to our questions. However, its ExpertCare solution, used by clinicians to quickly understand prescription needs for cardiovascular diseases, is deployed widely. According to the product's website, around 2,000 general practitioners, which oversee the care of around 17 million patients, use the software. Its other program, BestPathway, does not list the number of customers it supports, and is being phased out for its replacement system, Next-Gen. DXS said in its most recent financial report for the year ended April 2025 - in which it recorded revenues of £3.4 million ($4.5 million) - that it expects to secure many more customers in fiscal 2026/27. It said upcoming NHS restructuring means that around 80 percent of its customers, many of whom have "a significant number of GP practices" not using BestPathway/Next-Gen, will look to standardize platforms, which "represents a substantial revenue growth opportunity."
Daily Brief Summary
DXS International, a tech supplier for NHS, experienced a cyberattack affecting its internal systems early Sunday, impacting around 2,000 GP practices using its products.
The attack was swiftly contained by DXS's IT staff and NHS England, ensuring minimal disruption to frontline clinical services.
A third-party digital forensics firm is investigating to determine the attack's full scope and nature, while DXS cooperates with authorities.
DXS disclosed the incident to the London Stock Exchange and informed relevant regulators, including the Information Commissioner's Office.
Despite the attack, DXS reports minimal impact on its products, with its ExpertCare solution remaining operational for cardiovascular prescription management.
The incident underscores the importance of robust cybersecurity measures in healthcare, given the potential impact on patient care and operational continuity.
DXS anticipates significant revenue growth opportunities amid NHS restructuring, aiming to standardize platforms across its customer base.