Skip to main content

Threat advice and intelligence

We issue cyber security threat notifications to health and care organisations, ranging from weekly threat bulletins to immediate high-severity alerts.

Threat intelligence bulletins and alerts

Threat intelligence bulletins are issued in real time when a threat is assessed as high-severity, or weekly via email when assessed as medium-severity, to all health and care organisations who have subscribed.

Additionally, we provide specific, local threat alerts to individual organisations based on information identified via monitoring and threat protection services.

All threats are published on our CareCERT Information Sharing Portal.

Compromised credentials alerts

We proactively monitor the dark web, looking for potential breaches of NHS email addresses and other personal information. 

When these credentials have been compromised, they are reported to specific organisations to take action.

SMS alerts

In the event of a cyber security incident we can use SMS (text) messaging to provide information and updates to health and care leaders. Messages direct individuals to the very latest guidance and advice.

Contact us

To report an urgent cyber security issue, call 0300 303 5222 or email:

For general queries, to sign-up to any of our services or to give us feedback, telephone: 0300 303 5222 or email:

Last edited: 18 April 2019 10:09 am