NHS England Probe Suppliers for Cybersecurity Controls

Suppliers May Be Asked for Evidence of Certain Security Controls, Best Practices Marianne Kolbasuk McGee (HealthInfoSec) • January 23, 2026

The National Health Service in England will reach out directly to suppliers to ensure they implement proactive and robust cybersecurity risk management measures, officials said Wednesday.

See Also: Reduce Cloud Risk in Healthcare with Security by Default

The move comes in the wake of recent high-profile ransomware attacks on NHS vendors that seriously disrupted patient care.

In an open letter, top cybersecurity officials from NHS England said it or "the relevant contracting authority" plans to contact suppliers to discuss their security controls, and potentially request evidence or supporting information.

Suppliers that deliver services, critical patient care or operational continuity ...