Technology

NHS England tech provider reveals data breach - DXS International hit by ransomware

2025-12-22 12:20
494 views
NHS England tech provider reveals data breach - DXS International hit by ransomware

DXS International was hit by ransomware, but we don't know if any files were stolen.

  1. Pro
  2. Security
NHS England tech provider reveals data breach - DXS International hit by ransomware News By Sead Fadilpašić published 22 December 2025

DXS International was hit by ransomware

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

A person in a medical practice typing on a laptop. (Image credit: Pixabay) Share Share by:
  • Copy link
  • Facebook
  • X
  • Whatsapp
  • Reddit
  • Pinterest
  • Flipboard
  • Threads
Share this article 0 Join the conversation Follow us Add us as a preferred source on Google
  • NHS tech supplier DXS International hit by ransomware; minimal impact on clinical services
  • Unknown group DevMan claims responsibility, alleging theft of 300GB of company data
  • NHS suppliers have faced ransomware before; 2022 breach led to £3.07M ICO fine

DXS International, a key technology supplier for the National Health Service (NHS) in England, has revealed it suffered a ransomware attack at the hands of an unknown threat actor.

The company filed a new report with the London Stock Exchange stating it had suffered a “security incident” affecting its office servers.

The attack was discovered on December 14 and has since been remedied. The company said it brought in third-party cybersecurity specialists to investigate and assess the damage and notified relevant authorities about the incident.

You may like
  • A person in a medical practice typing on a laptop. Patient and staff data impacted by Cl0p ransomware attack on Barts Health NHS
  • hacker hands at work with interface around Healthcare firm apparently hit by major cyberattack exposing over a million medical records - how to find out if you're affected
  • Hackers leak medical reports after huge breach impacts 1.2 million patient records

300GB of stolen files

“There was minimal impact on the company's services and the company's front-line clinical services remain unaffected and operational,” the report concludes.

DXS did not share key details - what the nature of the attack was, who did it, or if they stole any files in the process. However, TechCrunch says it found a rather unknown ransomware actor called DevMan assumed responsibility.

“In a post on its dark web site, which TechCrunch has seen, the hackers listed the company on December 14 and claimed to have stolen 300 gigabytes of data from the company,” the publication claims.

If the files have not yet been leaked to the dark web, that could mean that DevMan are trying to extort DXS for money.

Are you a pro? Subscribe to our newsletterContact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

This is not the first NHS supplier to be hit with ransomware. Back in 2022, Advanced Computer Group suffered the same fate, but with more tangible effects for the healthcare provider. The attack caused disruptions to critical services at the time, including NHS 111, and meant some healthcare staff were unable to access patient records. The stolen information included patient phone numbers, medical records, and most concerning, access details for the homes of 890 people receiving care at home.

In March 2025, the UK Information Commissioner’s Office (ICO) issued a fine of £3.07 million for the breach that exposed personal information of 79,404.

Best antivirus software headerThe best antivirus for all budgetsOur top picks, based on real-world testing and comparisons

➡️ Read our full guide to the best antivirus1. Best overall:Bitdefender Total Security2. Best for families:Norton 360 with LifeLock3. Best for mobile:McAfee Mobile Security

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.

Sead FadilpašićSocial Links Navigation

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Show More Comments

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Logout Read more A person in a medical practice typing on a laptop. Patient and staff data impacted by Cl0p ransomware attack on Barts Health NHS    hacker hands at work with interface around Healthcare firm apparently hit by major cyberattack exposing over a million medical records - how to find out if you're affected    Hackers leak medical reports after huge breach impacts 1.2 million patient records    Data leak Hackers claim to have hit third-part provider for Boeing, Samsung and more    Representational image of a cybercriminal Over 70 US banks and credit unions affected by Marquis ransomware breach - here's what we know    A person holding a phone looking at a text with warning signs Emergency alert systems across US disrupted following OnSolve CodeRED cyberattack    Latest in Security Pirate skull cyber attack digital technology flag cyber on on computer CPU in background. Darknet and cybercrime banner cyberattack and espionage concept illustration. HPE tells customers to patch OneView immediately as top-level security flaw spotted    Security padlock and circuit board to protect data Motherboards from Gigabyte, MSI, ASUS, ASRock at risk from new UEFI flaw attack - here's what we know    An American flag flying outside the US Capitol building against a blue sky Trump’s new $900 billion Pentagon funding plan includes ‘enhanced cybersecurity protections’ for Cyber Command - here’s what we know    A hacker wearing a hoodie sitting at a computer, his face hidden. Amazon is reportedly being deluged with North Korean job applicants eager to break inside its walls    Abstract illustration of a firewall protecting servers WatchGuard Firebox OS forced to patch worrying security flaw, so update now    eurostar Eurostar chatbot security flaws almost left customers exposed to possible security threats    Latest in News Crucial X9 Pro Large External SSDs are now cheaper than internal ones as 4TB SATA SSD face extinction due to negligible price difference    Mullvad VPN app logo on screen Mullvad VPN boosts WireGuard speeds and stability with new Rust-based engine    Humanoid HMND 01 Alpha Bipedal This gift-wrapping robot is quite funny, actually     Equal Justice Under Law engraving above entrance to US Supreme Court Building Federal judge blocks Louisiana’s social media age verification law – here's why    Lara Croft in Tomb Raider: Legacy of Atlantis. 'We put the most pressure on ourselves' — Tomb Raider studio head on remaking one of the most iconic games of all time    Computer memory RAM on motherboard background Watch out – RAM rip-offs are now in vogue, so here's how to avoid them    LATEST ARTICLES