NHS Tech Supplier DXS International Hit by Ransomware Attack DXS International, a key technology supplier for the NHS in England, disclosed a ransomware attack on December 14, 2023, after detecting a security incident affecting its office servers. The company engaged third-party cybersecurity experts to investigate and confirmed minimal disruption to its services, with front-line clinical operations remaining unaffected. While DXS did not initially disclose details about the attack or data theft, an unknown ransomware group called DevMan later claimed responsibility. According to TechCrunch, the group posted on its dark web site on the same day, alleging the theft of 300GB of company data. The absence of leaked files suggests a possible extortion attempt. This incident follows a 2022 ransomware attack on NHS supplier Advanced Computer Group, which caused significant disruptions, including outages to NHS 111 services and restricted access to patient records. The breach exposed sensitive data, including medical records and home care access details for 890 individuals. In March 2025, the UK Information Commissioner’s Office (ICO) fined the company £3.07 million for the breach, which affected 79,404 people.