NHS Supply Chain

NHS Supply Chain issued a disruption alert on 18 March 2026 after the Handala Hack group wiped up to 200,000 Stryker devices, warning UK hospitals that Stryker ordering, manufacturing and invoicing systems were degraded. Most Stryker product lines were projected to return to normal by 10 April 2026, with trusts reverting to paper-based inventory workflows in the interim.

NHS Supply Chain manages procurement for all NHS hospitals and trusts in England, procuring products from hundreds of suppliers across medical devices, consumables and services. Its role makes it a critical node in the UK's healthcare supply chain and a notification nexus when any Major supplier experiences a cyber incident.

The Stryker disruption illustrates the downstream exposure NHS infrastructure faces from third-party supplier cyber incidents. NHS Supply Chain's alerting role sits between the affected US vendor and the UK clinical operations that depend on its kit; a faster reporting mandate under the Cyber Security and Resilience Bill would tighten the notification chain for future incidents of this type.