A ransomware attack on the NHS has now been linked to the first confirmed patient death. In a Sky News exclusive, Check Point Software’s Deryck Mitchelson — former Chief Information Security Officer for NHS Scotland — provided expert commentary on the devastating consequences of a 2023 cyberattack that crippled hospital systems, delayed 1,100 cancer treatments, and halted thousands of operations.
As the attack’s human cost became undeniable, the story led bulletins and was picked up by global media outlets across broadcast, online, and regional radio. It became one of the most widely shared NHS cybersecurity stories of the year — transforming abstract concerns about data protection into a real, tragic, and emotionally resonant crisis.
Challenge:
Loss of Life, Loss of Trust: A patient’s death, following long delays in blood test results, was officially linked to the cyberattack on Synnovis pathology systems — making the risks of insecure digital infrastructure impossible to ignore.
Complex Supplier Networks: NHS care depends on a web of third-party providers. In this case, it was the IT supplier — not the trust — that was breached, underscoring the systemic fragility of healthcare cybersecurity.
Media Timing: With ongoing NHS pressures and digital transformation underway, the timing of the story had to be managed delicately — highlighting risk without undermining confidence in healthcare.
Clear, Human-Centred Commentary: The media needed expert voices who could avoid jargon and frame the issue in moral, not just technical, terms. Check Point’s spokesperson needed to connect emotionally and ethically — not just explain the mechanics of ransomware.
Key Statistics:
-
1,100 cancer treatments delayed
-
2,000 outpatient appointments cancelled
-
1,000+ operations postponed
-
Blood test turnaround times severely impacted
-
Entire NHS regions forced to use universal O-type blood
-
National blood shortages exacerbated as a result
Action:
Check Point’s Deryck Mitchelson provided powerful media commentary in an exclusive to Sky News, stating:
“This wasn’t a faceless act. It wasn’t just systems or data you targeted — it was care. It was people. One of them has now lost their life.”
The quote featured prominently in Sky’s TV bulletins and online editorial, and set the tone for the wider story as it spread across international and regional news outlets. The campaign centred on the human consequences of cyberattacks — positioning Check Point not only as technical experts but as ethical voices on the frontline of digital healthcare security.
Results:
Major National Coverage:
-
Sky News (exclusive TV, online, and app feature)
-
BBC Breakfast
-
Yahoo News UK, Malaysia, New Zealand
-
MSN UK
Widespread Regional Broadcast:
-
Manx Radio
-
Channel 103 FM
-
3FM
-
Island FM
-
This is the Coast
-
Central FM
-
Fosse 107
-
Vibe 107.6
-
Black Country Radio
-
MKFM
-
Coast FM
Global Reach:
-
Multiple international editions of Yahoo picked up the story, giving Check Point visibility in Asia-Pacific and Europe.
Reputation as a Leading Voice:
-
Deryck Mitchelson’s quote was used as the moral centre of the story — establishing Check Point as a cybersecurity organisation that not only understands risk but also responsibility.
Key Takeaways:
Cybersecurity is Patient Safety: This story shifted the narrative — from one about tech infrastructure to one about life-and-death consequences. It made cybersecurity a public health issue.
The Power of the Right Spokesperson: Deryck Mitchelson’s NHS background gave his words weight. His commentary connected emotionally, giving the story a human core that resonated with editors and viewers alike.
Exclusivity Builds Authority: Leading with Sky News positioned Check Point at the centre of the national conversation — with every follow-on outlet quoting and building on their commentary.
