Analysis frame
Primary-source evidence
Use the patient's path from sample to result, rather than a server count, to measure recovery.
- Patients, phlebotomists and ward staff waiting for time-sensitive results
- Pathology suppliers and hospital emergency planners
- The NCSC forecast identifies no future hospital or incident.
- The NHS records do not establish that the Synnovis attackers used AI.
- A failure at a shared supplier can delay care at more than one trust.
- Triage can preserve urgent testing while a substantial backlog of routine care grows.
A Thursday-morning drill
Give a ward, a lab and an outside supplier one fictitious urgent sample. Leave their usual shared system out of the exercise. Ask who accepts the specimen, how the receiving clinician verifies the result and who reconciles the paper record after service returns. Time each handoff. This is a proposed drill, not a reconstruction of a particular patient's care.
Count the patients still waiting
Urgent work can resume before routine work does. An operations report should tell the board both when the first result arrived and what backlog remained. Otherwise the day the technology team declares success could be the day another patient's appointment is postponed.
Go to the source
Read the evidence behind this analysis. External links open in a new tab.
UK National Cyber Security Centre — November 3 warning and investment context NHS England — Synnovis incident and supplier role NHS England London — appointment and procedure counts at two trusts NHS England — June 24 account of urgent sample processing
