German police arrest Russian suspect linked to fatal Synnovis ransomware attack
German authorities have arrested a 28-year-old Russian national linked to the Qilin ransomware group following the 2024 cyberattack on London pathology provider Synnovis.
FTMQ Security, written by our newsroom0 views

German police have arrested a 28-year-old Russian national suspected of being a key member of the Qilin ransomware group. Reports from Graham Cluley, Pasquale Pillitteri, and Bitdefender confirm the suspect has been extradited to Germany following an investigation into cyberattacks tied to the group. [1][2][3]
Graham Cluley reported, referencing BBC News, that detectives have linked the suspect to the 2024 ransomware attack against pathology provider Synnovis. German media identified the man as Vladimir K. The suspect was initially detained in May in Japan while traveling on holiday before his extradition to Germany. [1]
As FTMQ Security reported earlier, the 2024 ransomware attack targeted Synnovis, a London-based provider of pathology services. The cyberattack severely disrupted blood testing and pathology services across London hospitals, and authorities reported that the disruption contributed to the death of a patient. [1][2][6][9]
Synnovis operates as a partnership between SYNLAB UK and Ireland, Guy's and St Thomas' NHS Foundation Trust, and King's College Hospital NHS Foundation Trust. German officials continue to investigate the suspect's activities within the Qilin ransomware network following his extradition. [1][2][6]
In short
- A 28-year-old Russian national named in German media as Vladimir K has been arrested in connection with the Qilin ransomware group.
- The suspect was initially detained in May while on holiday in Japan before being extradited to Germany.
- Investigators linked the suspect to the 2024 ransomware attack on London pathology provider Synnovis.
- The Synnovis cyberattack disrupted London hospital services and contributed to a patient death.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s deathGraham Cluley, 16h ago (the report this story comes from)
- [2]Synnovis ransomware attack, patient died and alleged Qilin member extradited to GermanyPasquale Pillitteri, 19h ago
- [3]Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient's deathBitdefender, 19h ago
Background
- [4]Disappearance of Kyran Durnin on Wikipedia
- [5]Qilin on Wikipedia
- [6]Synnovis on Wikipedia
- [7]Police on Grokipedia
- [8]Qilin on Grokipedia
- [9]German police arrest Russian man linked to fatal Synnovis ransomware attack FTMQ Security, 4d ago
Our newsroom writes these reports with the help of software, from the 9 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- German police arrest Russian man linked to fatal Synnovis ransomware attackData Breaches, 4d ago
- FBI arrests suspect linked to ShinyHunters breach of job portalTop Stories, 11d ago
- Drone attacks damage Yandex data centers causing cloud service outagesTop Stories, 8d ago
- French Danfoss refrigeration controllers online exposure drops 71 percent after attackData Breaches, 5d ago
- Ransomware Attacks Reach Record Volume in Third Quarter of 2026Data Breaches, 11d ago
More in Data Breaches
- Welsh organizations reprimanded by ICO after weak passwords lead to data breach2h ago
- OpenCode silently patches critical remote code execution vulnerability in developer tool2h ago
- Ransomware groups exploit Palo Alto Networks flaw to bypass authentication2h ago
- Conduent agrees to pay 80 million dollars over 2024 healthcare breach1d ago
- US cybersecurity job postings drop to four year low1d ago
- Canva confirms enterprise customer data exposed in third party incident1d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.

Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.