Fully Funded Cyber Support for Care Providers: What’s available and how to access it

Cyber Perils in Care

Cyber threats to UK care providers have intensified sharply. In 2025, ransomware incidents in healthcare rose by 30%, shifting focus to vendors and partners. The Synnovis attack by the Russian group Qilin disrupted London NHS Trusts, delaying blood tests and causing patient harm, including one death. Similarly, the December 2025 breach at DXS International, a NHS tech supplier, exposed internal servers, affecting GP practices for 17 million patients.

This surge stems from care sectors' vulnerabilities. Providers handle sensitive personal and medical data, making them prime targets for phishing and ransomware, which account for 75% of incidents. With limited budgets, many outsource IT, yet responsibility remains theirs. The National Cyber Security Centre notes three main attack types: phishing, malware, and denial-of-service, often exploiting human error or weak systems.

Government response accelerated in early 2026. The Cyber Action Plan, launched January 6, allocates £210 million for a new Government Cyber Unit to impose standards and provide expertise. Phased to 2029, it addresses under-digitisation and skills gaps. Concurrently, the Cyber Security and Resilience Bill, in second reading January 6, expands regulations to IT suppliers for essential services, mandating incident reporting and mitigation plans.

Stakes are concrete. Breaches cost an average £9,528 over three years, but larger ones trigger operational halts, like NHS Scotland's 2025 outages delaying care. Inaction risks fines, data theft impacting 882,000 in past health breaches, and reputational damage. Deadlines loom: compliance phases begin April 2027, with regulators recovering costs via fees.

Non-obvious tensions emerge. Small care homes struggle with compliance costs, potentially straining finances amid rising operational pressures. Third-party risks amplify threats, as seen in retail campaigns like Scattered Spider's 2025 hits on Marks & Spencer. The rise of AI-driven attacks in 2026 adds unpredictability, transforming threats at machine speed. Balancing security with care delivery creates trade-offs, where over-caution might slow urgent medical access.