Cyber Security Awareness Month 2025

As we build an NHS fit for the future through our transformation from analogue to digital, cyber security has never been more important. Cyber-crime threatens patient safety and can disrupt the care people depend on.

Cyber Security Awareness Month is an international initiative that reminds us there are simple ways to protect the NHS (and yourself) from online threats.

This year, we're focusing a back-to-basics approach to help build knowledge, skills, habits and confidence. These are to:

• recognise the risks - understand what's at stake and spot common threats
• respond effectively - know what to do when you spot something suspicious
• reinforce your defences - follow simple steps to stay safe and secure
• reflect and recover - learn from incidents to bounce back stronger

Why this matters

Cyber criminals target healthcare systems because of the quantity and value of data we hold. Recent attacks on major retailers like M&S, Co-op and Harrods have shown how quickly organisations can be disrupted. The NHS is a prime target - an attack could be far more damaging, affecting patient care across the country.

The 2017 WannaCry attack affected more than 60 NHS Trusts, spreading to over 200,000 computer systems worldwide. It doesn't take much to cause serious disruption - one weak password brought down a 158-year-old company, putting 700 people out of work.

Our collective responsibility

As we implement the 10 Year Health Plan's transformation from analogue to digital, cyber security is everyone's responsibility - not just IT teams.

Stronger security powers better care. Follow these simple steps to stay safe:

• use strong passwords
• turn on multifactor authentication
• recognise and report phishing
• keep up to date with learning

With 19,000 ransomware attacks targeting UK organisations every year, we must all play our part. Working together through everyday good cyber behaviours is our biggest defence.

Take action in your organisation

A toolkit of ready-made assets and template copy is available below to help NHS organisations run their own cyber awareness month campaign.

The Keep I.T. Confidential toolkit can also be used by any organisation at any time. It includes materials for all staff, training resources, and guidance for local use.

Together, we can build a cyber-resilient NHS that protects patients and supports our mission for a future-ready health service.

This podcast series explores current and relevant cyber security topics affecting health and care, from threat intelligence to the importance of diversity in cyber teams. Learn more about our podcasts.

Listen to our podcast 'Mind the gender gap' on SoundCloud.

Listen to our podcast 'Old tech, new threats or new tech, old threats?' on SoundCloud.

If you are wondering, ‘What has cyber security got to do with me?’ The answer could be to turn off the machine you are using and now try doing your job.

Cyber attacks are a patient safety issue and every person in health and adult social care has a responsibility to help protect patients and NHS data. Recognising common security threats and taking simple steps to minimise risks can help keep us safe.

During this year’s Cyber Security Awareness Month you can: 

• learn new cyber security skills
• find out how our products and services can help protect your team or organisation
• raise awareness of common security threats by running your own campaign
• become a security champion
• take a password pledge

View all training

Raise awareness of common cyber security threats and learn how you and your team can help protect patients and data.

Download our campaign resources to help.

The campaign toolkit includes screensavers, animations, digital banners, social media content, and more.

We've created two versions of our Keep I.T. Confidential toolkit. One for health and one for adult social care to use.

Run your own campaign.

We protect healthcare systems from cyber attacks and monitor for new threats 24 hours a day.

Our cyber and data security services are available to the NHS and social care.

The Cyber Security Operations Centre (CSOC) is part of the central security team for the NHS, protecting healthcare systems from  cyber attacks and monitoring for new threats 24 hours a day.

View all products and services

Our Cyber Associates Network (CAN) brings together experts from across public-sector health and care.