Russian Qilin Cybercrime Suspect Linked to London Hospital Hack and Patient Death Investigation

German police have detained a 28-year-old Russian man suspected of being a core member of the Qilin cybercrime group, which has been linked to a 2024 attack that disrupted blood testing services at London hospitals.

The cyberattack on blood testing company Synovis caused widespread disruption to pathology services. It is considered the first cyberattack directly linked to a patient’s death.

German Police Investigate Qilin’s Role in the London Hack

The BBC confirmed that German detectives are examining the Synovis attack as part of their investigation into detained Russian nationals and their associates.

British police are also investigating whether the case could lead to an unlawful killing charge. If pursued, it could become a world-first criminal investigation of its kind in a cybercrime case.

Russian Suspect Arrested in Japan

The suspect, identified by German media as 28-year-old Vladimir K. Kevin, was arrested in Japan while on vacation in May.

German authorities said they intercepted his travel plans and coordinated with Japanese police, who arrested him after he entered the country. He is currently being extradited to Germany.

Qilin Accused of Thousands of Cyberattacks

Vladimir K. is accused of being one of the core members of Qilin, a cybercriminal organization said to have hacked more than 4,000 organizations and extorted over $140m (£105m) from victims since 2024.

German authorities were seeking him in connection with an attack on a logistics company in September 2024. Investigators allege that the group encrypted data on the company’s systems and demanded approximately $160,000 in cryptocurrency.

The arrest and extradition were first reported in early October, external. The BBC has now confirmed that German police are also investigating the alleged connection between Vladimir K. and the Synovis hack.