**London**: Escalating concerns regarding the NHS’s reliance on an outdated supply chain system highlight significant vulnerabilities. The 30-year-old RESUS system faces cybersecurity threats, impacting the timely delivery of essential medical supplies, amplifying the need for enhanced digital solutions in healthcare procurement processes.
B2B supply chains play a crucial role in global commerce, particularly within critical sectors such as healthcare, where the timely transport of vital supplies can impact patient care significantly. This week, concerns have escalated regarding the NHS supply chain in the UK, which relies on a 30-year-old system known as RESUS. This outdated framework manages over $5 billion in annual spending for the NHS and has been repeatedly targeted by cybercriminals, prompting B2B leaders to prioritise enhancements in procurement processes and supply chain resilience.
Recent court filings reveal that the RESUS system has registered 35 top-priority “P1” alerts in the 11-month period leading up to November 2024. Notably, one of these alerts led to a failure in processing 17,000 warehouse order lines, resulting in delays that affected product distribution to hospitals.
The situation highlights a wider, global dilemma wherein the healthcare sector, while benefiting from rapid digital advancements, is simultaneously becoming increasingly susceptible to cyberattacks that threaten the integrity of medical supply chains. As healthcare institutions shift towards digital management of diverse operations—from inventory oversight to supplier communications—the ramifications of a cyber breach can be far-reaching.
With medical procurement systems often involving intricate networks of suppliers, manufacturers, and logistics providers, any vulnerability, particularly at a single supplier level, can potentially disrupt the seamless flow of essential medical supplies—including medications, medical devices, and protective equipment. Unfortunately, most procurement systems were not originally designed with cybersecurity as a primary consideration, leaving them ill-equipped to counter evolving threats.
Delays in delivery might appear merely logistical; however, in the healthcare landscape, such disruptions can have adverse effects on patient outcomes. The inability to procure vital equipment or medications on time can lead to postponed treatments, hinder surgeries, and affect responses in emergencies.
Jonathan Chen, founder and CEO of Nitra, highlighted the complexities involved in healthcare procurement in an interview, stating, “Every single day doctors are buying from the major brands like McKesson, Henry Shine, AbbVie, all these folks, and oftentimes they’re doing it manually through a salesperson who comes to their office and sends them an invoice … it gets very jumbled up and the process is obscure,” underscoring the operational inefficiencies that can aggravate supply chain vulnerabilities.
A report released by PYMNTS in collaboration with Citi further reflects this uncertainty, indicating that only 44% of healthcare treasurers view their cash flows as predictable, leaving a significant majority of 56% facing unpredictability in their financial management.
The recent incident involving the NHS serves as a significant indicator of the pressing cybersecurity challenges that healthcare procurement systems face. Based on findings from PYMNTS Intelligence, the industry’s payment technologies lag behind those in other sectors, with just over half of healthcare executives—54%—believing their existing systems are adequate.
Nelly Co-founder and CEO, Niklas Radner, mentioned in an interview: “There’s a lot of admin work that needs to be done [in healthcare] because it’s so regulated.” While compliance with regulatory standards is essential, it may not be sufficient on its own to develop a truly resilient supply chain.
As the sector undergoes increasing digitisation, securing procurement and vendor systems is emerging as one of the critical priorities for healthcare organisations. There are promising innovations on the horizon, as advanced technologies, including artificial intelligence (AI) and machine learning (ML), begin to play a role in monitoring supply chain activities for unusual activities. These technologies can offer a proactive stance on cybersecurity by detecting potential threats before they escalate into breaches.
Dean Puzon, President and Co-founder of Big Data Healthcare, remarked in a previous interview that “Automation can significantly transform the payment reconciliation process in healthcare,” envisioning a future shaped by automation, AI, and data-driven innovations within healthcare payments. As the sector navigates these challenges, the focus remains on enhancing the resilience and security of its supply chains.
Source: Noah Wire Services



