Skip to content
You can now search across every topic, entity and event.What's new
NHS
OrganisationGB

NHS

UK publicly funded health service; central to devolved elections and repeated cyber-supply-chain attacks.

Last refreshed: 29 May 2026 · Appears in 2 active topics

Key Question

How are the 2026 devolved election parties planning to fix NHS waiting lists?

Timeline for NHS

#37 May
#51 May

UK cyber sector clears 14.7bn pounds

Cybersecurity: Threats and Defences
View full timeline →
Common Questions
What are the Scottish parties promising for the NHS in 2026?
Parties have made competing pledges on waiting time reductions, but IFS and FAI analysis finds several commitments lack credible funding.Source: IFS Scottish manifesto assessments, April 2026
What is Plaid Cymru promising for the NHS in Wales?
Plaid Cymru promised ten new surgical hubs for hip, knee, hernia and cataract procedures in their February 2026 Senedd manifesto.Source: Plaid Cymru Senedd manifesto, February 2026
Is the NHS run differently in Scotland and Wales?
Yes. NHS Scotland and NHS Wales are fully devolved: Holyrood and the Senedd control their budgets and structure independently of NHS England.Source: Constitutional background

Background

Founded in 1948 and funded through general taxation, the National Health Service operates as four separate organisations across England, Scotland, Wales, and Northern Ireland following devolution. NHS Scotland and NHS Wales are fully devolved, meaning Holyrood and the Senedd hold primary responsibility for their budgets and structures. NHS England is administered by the UK Government and indirectly affects devolved nations through Barnett formula consequentials. With more than 1.4 million staff in England alone, the NHS is the world's largest publicly funded single-payer health system.

The NHS features as a core funding pressure in the 2026 Scottish Parliament and Senedd elections, with party manifestos making competing pledges on waiting times, surgical hubs, and staffing. The Fraser of Allander Institute and IFS analyses of manifesto costings identify NHS budget commitments as among the most expensive and potentially unaffordable pledges: the SNP overstates NHS consequentials by £1.6 billion; the Scottish Conservatives underestimate their NHS pledge by at least £600 million. Plaid Cymru's Senedd manifesto centres NHS relief, promising ten new surgical hubs for Wales; Welsh Labour pledged a £4 billion NHS investment programme. With waiting lists at record highs after the Covid-19 pandemic, NHS performance has become the dominant domestic issue in the 2026 devolved elections.

The NHS and its supply chain have become a persistent target for state-linked and criminal cyber actors. In March 2026 Iran-linked hacktivist group Handala wiped between 80,000 and 200,000 Stryker medical devices across 79 countries, with NHS trusts among the affected operators; the attack exploited a single stolen Microsoft Intune credential. The UK Government's response included a £90 million funding commitment from DSIT in May 2026 specifically targeting NHS suppliers and SMEs, alongside the voluntary Cyber Resilience Pledge which requires signatories to attain Cyber Essentials across supply chains. The supply-chain threat model now treats NHS procurement as a systemic attack surface rather than a set of isolated incidents.

More questions
How is the NHS funded and organised across the UK?
The NHS is funded through general taxation and operates as four separate organisations: NHS England (UK Government), NHS Scotland (Holyrood), NHS Wales (Senedd), and Health and Social Care in Northern Ireland. Devolution means each nation controls its own budget and structure.Source: NHS
Why are NHS waiting lists so high in 2026?
Waiting lists across all four NHS nations reached record highs following the Covid-19 pandemic, driving NHS performance to the centre of the 2026 Scottish Parliament and Welsh Senedd election campaigns.Source: uk-elections-2026
What did the Handala cyberattack mean for the NHS?
Iran-linked group Handala wiped up to 200,000 Stryker medical devices across 79 countries in March 2026, including NHS trust equipment, by exploiting a single stolen cloud admin credential — with no malware required.Source: cyber-threats-and-defences
What is the UK government doing to protect NHS cybersecurity?
DSIT announced £90 million in May 2026 specifically to improve cyber resilience among NHS suppliers and SMEs. A voluntary Cyber Resilience Pledge also requires signatories to attain Cyber Essentials certification across their supply chains.Source: cyber-threats-and-defences
Source Material