Cyber security incident at UCLH
28 May 2025
Publish date: 28 May 2025
There have been media reports that unauthorised users accessed a UCLH system in a cyber security incident.
We want to reassure all our patients that we have no evidence their data has been accessed.
The UCLH system which was compromised contained data about staff mobile devices such as the mobile number and the IMEI number (a unique code to identify the phone on the mobile network). It did not contain passwords or patient data.
We take the security of our data and systems extremely seriously and we are investigating this matter thoroughly. We acted immediately to make the system secure, and we have been working with cyber security colleagues at NHS England as part of our response.
