Russian National Linked to Deadly Hospital Cyberattack Arrested in Germany
A 28-year-old Russian man, allegedly a member of the Qilin cybercrime gang, has been detained in Germany in connection with a hack on U.K. health services that led to patient deaths.
German authorities have arrested a Russian national suspected of being a key member of the Qilin cybercrime group, which is linked to a devastating cyberattack on the U.K. health system. The 28-year-old suspect, identified in German media as Vladimir K., was apprehended in Japan in May while on holiday and is now in German custody.
German police are investigating the suspect's alleged involvement in the 2024 hack of Synnovis, a U.K. diagnostics and pathology service provider. The attack disrupted pathology services across multiple London hospitals, leading to cancelled operations, diverted emergency patients, and a critical incident being declared. This incident marked the first cyberattack to be directly linked to a patient's death, with one trust confirming a patient died unexpectedly after a prolonged wait for a blood test result attributed to the hack.
The Qilin gang, active since 2022, is accused of compromising over 4,000 organizations and extorting more than $140 million. Vladimir K. is also wanted in Germany for a separate 2024 incident where he allegedly encrypted data for a logistics company and demanded a ransom of approximately $160,000 in cryptocurrency.
The hackers released sensitive Synnovis data online after their ransom demand was not met. At the time of the attack, they claimed their actions were a protest against the U.K.'s perceived lack of support in the Russian war on Ukraine, though investigators dismissed this as an attempt to distance themselves from typical extortion motives.
Qilin has also been linked to other high-profile attacks, including one on the Japanese beer maker Asahi in October 2025. The arrest of a Russian national is significant, as Russia's government rarely cooperates with Western law enforcement requests for the extradition of its citizens accused of cybercrimes.