NHS Cyber Alerts

NHS Digital Cyber Alerts

Security advisories and threat alerts from the NHS Digital Data Security Centre. No authentication required.

Alert Severity Levels

• Critical — Actively exploited or imminent threat requiring immediate action.
• High — Significant risk, patch or mitigate within days.
• Medium — Moderate risk, apply mitigations within normal patch cycles.
• Low — Informational, awareness and long-term planning.

Alert Types

• Cyber Alert (CC) — Alerts about specific vulnerabilities, threats, or incidents.
• Advisory (AV) — General security guidance and best-practice recommendations.

Response Structure

Each alert includes threatId, title, publishedDate, severity, summary, and basePath linking to the full advisory on the NHS Digital website.

Gotchas

• The list feed is paginated (default 10 per page). Use the /page?page=x path on the collection URL when you need beyond the first page.
• Single-alert detail is GET .../CyberAlert/single?threatid=CC-1234 (lowercase threatid). Path-style /CyberAlert/{id} and ?threatId= on the collection URL do not work.