NHS England takes security and the protection of private data extremely seriously. If you believe you have found a vulnerability or other issue which has compromised or could compromise the security of any of our systems and/or private data managed by our systems, please do not hesitate to contact us using the methods outlined below.

• Security
  • Table of Contents
  • Reporting a vulnerability
    • Email
    • NCSC
  • General Security Enquiries

Please note, email is our preferred method of receiving reports.

If you wish to notify us of a vulnerability via email, please include detailed information on the nature of the vulnerability and any steps required to reproduce it.

You can reach us at:

• [ A product team email address ]
• [email protected]

You can send your report to the National Cyber Security Centre, who will assess your report and pass it on to NHS England if necessary.

You can report vulnerabilities here: https://www.ncsc.gov.uk/information/vulnerability-reporting

If you have general enquiries regarding our cybersecurity, please reach out to us at [email protected]