Patients are being turned away from A&E departments and routine operations cancelled across England as 100 NHS hospitals have been forced to abandon digital systems following a coordinated cyber-attack. Staff have reverted to pen and paper to record medical notes, prescriptions, and test results, a scenario that many had hoped would never again be necessary in the modern health service.
The attack, which struck at 4.30am on Tuesday, targeted a widely used patient administration system. Within hours, hospital trusts from Newcastle to Plymouth reported that their networks were compromised. The National Cyber Security Centre declared a major incident, but praised the NHS’s response as a “model of resilience”.
For patients like Margaret Thompson, a 72-year-old from Leeds who had been waiting for a hip replacement, the news was devastating. “I’ve been on the list for 18 months. Now they’ve told me it’s cancelled and they don’t know when it will be rescheduled. I can barely walk. It feels like the system has given up on me,” she said.
In the control rooms of hospitals, the chaos is palpable. Nurses are handwriting charts, pharmacy teams are manually calculating dosages, and doctors are scrambling to locate paper copies of patient histories. The irony is not lost on staff that a system designed to be more efficient has been reduced to a 1950s-level of operation.
Unions representing NHS workers have been quick to demand answers. “This is what happens when we underinvest in IT infrastructure for years,” said Rachel Harrison from the British Medical Association. “We have been warning that a major cyber-attack could cripple the NHS. Now it has. The government must commit to a full public inquiry and funding for a modern, secure system.”
Yet, the official line from Downing Street is one of cautious optimism. A spokesperson said that the NHS’s “defensive protocols” had prevented the attack from spreading to systems dealing with patient safety. “We have good procedures in place. The fact that hospitals can switch to paper without losing critical data is a testament to the resilience we have built,” they claimed.
For those on the front line, that resilience is cold comfort. In busy A&E departments, triage is being done with sticky notes. In maternity wards, birth records are being kept on paper that could easily be lost. The risk of human error has skyrocketed. “We are doing our best with what we have,” said one senior nurse in Birmingham, who asked not to be named. “But patients are scared, and frankly, so are we. This is not a model. This is a disaster.”
The economic impact is already being felt. Private healthcare providers report a surge in enquiries from patients willing to pay to avoid the delays. For the majority who cannot afford that, the wait is indefinite. The standstill is a stark reminder of the digital divide in healthcare. Those with resources can bypass the crisis, while those dependent on the NHS are left in limbo.
Regional inequality is also laid bare. Hospitals in wealthier areas, with more investment in local IT systems, are faring better than those in poorer regions that rely heavily on centralised infrastructure. As usual, it is the communities already struggling that are hit hardest.
The government has promised that systems will be restored within 72 hours. But for the thousands of patients whose surgeries and appointments have been postponed, the damage may take longer to repair. The NHS has been forced into a time warp, and it is the most vulnerable who are paying the price.
