Respond to a disaster
When a cyberattack disrupts everyday services
What to do when a cyber incident affects healthcare, shopping, deliveries or online services, and how to spot scams that may use AI.
At homeOut and about
This guide includes South Korean official guidance. Emergency numbers, shelters and procedures differ by country. Follow local authorities and emergency services.
First, check this
A cyber incident at one organisation can interrupt everyday services. Check its official updates, make a backup plan and treat unexpected messages with care.
What has happened
- In June 2024, a ransomware attack on Synnovis disrupted pathology testing and delayed appointments in south-east London. NHS England advised patients to attend unless told otherwise and to seek urgent care as usual. [1]
- In 2025, UK retailer Co-op reported that a cyberattack and its response affected stock availability. In the US, a retailer reported that its distributor UNFI's cyber incident temporarily disrupted orders and deliveries, causing shortages in June and July 2025. [2] [3]
- In November 2026, supermarkets in several European countries reported refrigeration problems associated with apparent cyberattacks; some food was discarded. The scope and circumstances were still being investigated when reported. Do not assume that every service outage is an attack. [4]
Make a small backup plan
- Keep essential contacts, prescription details and appointment information on paper as well as on your phone. Discuss medication and equipment contingency plans with your healthcare provider.
- Keep a modest supply of everyday essentials that fits your household, and consider an alternative payment method and another nearby store. Avoid panic buying; availability and payment options vary. [5]
- Turn on two-step verification for important accounts and keep your devices updated. Save official contact details before you need them. [5] [6]
When a service is interrupted
- Check the organisation's official website, app or a known phone number for affected services and alternatives. A service outage alone does not mean your own account was compromised.
- For an appointment or prescription, follow the provider's current instructions and contact them through a known channel if unsure. Do not assume an appointment is cancelled. If care is urgent, use local emergency services or the urgent-care route available where you live. [1]
- Ask the store or delivery provider about availability and substitutions. Follow local food safety advice and product recalls; do not judge potentially unsafe refrigerated food by smell or appearance alone. [7]
Beware of convincing messages
- AI can make parts of cyber operations faster and more effective and make impersonation harder to spot. The UK NCSC assesses trends and future risks; its forecasts are not proof that a particular incident involved AI. [8]
- A message about a refund, delivery or a medical record may be a scam. Do not rely on its links or phone numbers: independently find the organisation's official contact details. [9]
- If the organisation confirms a data breach or you suspect account compromise, follow its official instructions, change affected reused passwords, enable two-step verification and contact your bank promptly if payment details were exposed. [6] [10]
Source
- 1. NHS England: Synnovis cyber incident and patient guidance
- 2. Co-op: 2025 financial results and incident impact
- 3. Natural Grocers: annual report on UNFI distribution disruption
- 4. Associated Press: European supermarket refrigeration incidents, 2 November 2026
- 5. FEMA: cyberattack preparedness
- 6. UK NCSC: two-step verification
- 7. US FDA: food safety during power outages
- 8. UK NCSC: AI and cyber intrusion assessment
- 9. UK NCSC: spotting scams
- 10. UK NCSC: responding to a data breach
Research reviewed: 7 November 2026
Sources may be in Korean or English. Always follow current local guidance.