An NHS tech supplier is investigating a cyberattack that affected its systems in the early hours of Sunday.
DXS International, which provides tools to NHS trusts to tackle appointment referral errors and prescriptions, disclosed the “security incident” to the London Stock Exchange on Thursday morning.
The attack affected its office servers but was immediately contained by its own IT staff, and those working for NHS England, the statement says.
A third-party digital forensics company is now investigating the case to understand the full scope and nature of the attack.
DXS says there was minimal impact on its products, and its frontline clinical services remained operational throughout.
“The company has notified the relevant regulators, authorities, and law enforcement agencies, including the Information Commissioner’s Office, and various NHS bodies, and is fully cooperating with their investigations.”
The Register contacted both DXS and the NHS to understand the impact on patient care across the UK.
DXS does not publicly disclose how many NHS customers it supports in total, and it did not immediately respond to our questions.
However, its ExpertCare solution, used by clinicians to quickly understand prescription needs for cardiovascular diseases, is deployed widely.
According to the product’s website, around 2,000 general practitioners, which oversee the care of around 17 million patients, use the software.
Its other program, BestPathway, does not list the number of customers it supports, and is being phased out for its replacement system, Next-Gen.
DXS said in its most recent financial report for the year ended April 2025 – in which it recorded revenues of £3.4 million ($4.5 million) – that it expects to secure many more customers in fiscal 2026/27.
It said upcoming NHS restructuring means that around 80 percent of its customers, many of whom have “a significant number of GP practices” not using BestPathway/Next-Gen, will look to standardize platforms, which “represents a substantial revenue growth opportunity.” ®