
If the lab goes offline, who gets the next blood test?
If a hospital's network fails on a Tuesday morning, the blood in a sample tube doesn't stop changing. Somebody has to know where to send it, how to mark it urgent and who will call the ward with the result. A hospital can bring a server back online without any of those things working yet. Yesterday we covered the National Cyber Security Centre's assessment that AI-powered malware is highly likely to feature in a ransomware attack on UK critical infrastructure by 2028. The agency's November 3 announcement is the same warning, not evidence of a second attack. Today there's a more useful question: what does continued service look like when the system that fails belongs to a supplier? Consider Synnovis. After ransomware disrupted the pathology provider in June 2024, the NHS made arrangements so urgent blood samples could still be processed. That did not mean normal care had resumed. NHS London later counted 10,152 postponed acute outpatient appointments and 1,710 postponed elective procedures at the two most affected trusts. Those are appointments and procedures, not a count of unique patients. The NHS account does not attribute the attack to AI.

