Cyber attack at NHS London hospitals in critical incident, operations cancelled

If there was any actual willingness to do any kind of governance what you can do here is actually investigate what happened, don't take the "service providers" at their word and then, if they're not doing their jobs, throw the book at them.

It won't happen, partly because that's effort and would need some amount of being bothered and also UK is just a messy heap of middlemen all providing the minimum service (and usually less) at maximum margins while disclaiming accountability, and it's not only not seen as a problem, but actively desirable.

Everything from fixing potholes, x-raying patients to recruiting for the army is outsourced and re-outsourced and no one ever seems to think that the outcomes may occasionally need to be looked at.

The articles says the the attack was at a services provider, not the NHS hospitals.

Though it could have been, thinks said provider: "this sort of attack can happen to anyone at any time".

Er...