NHS Western Isles has warned patients after a fraudulent email was sent to someone following a breast screening appointment, requesting photographs and videos of themselves. The sender falsely claimed to be a health professional seeking the images for assessment purposes.
The health board confirmed that the email originated from a non-NHS email address. In a statement, a spokesperson emphasised that the organisation takes patient confidentiality and information security with the utmost importance and is conducting a thorough review of the incident.
How does the NHS contact patients about screening?
NHS Western Isles clarified that breast screening services never use personal or non-NHS email addresses to contact patients. Communication regarding screening appointments, results, or follow-up care is conducted exclusively through official channels. The health board stated that
patients may be contacted by letter or telephone regarding breast screening appointments, results, or follow-up arrangements, but NHS staff would never ask patients to send photographs or videos by email.
This clarification is particularly important given the broader context of healthcare cybersecurity concerns. In recent months, healthcare systems across the UK have faced increased threats, with a recruitment platform used by Northern Ireland trusts experiencing a significant cyber attack in March 2026, during which hackers claimed to have accessed sensitive personal data.
What should patients do if they receive such emails?
The health board has urged all patients to remain vigilant against similar fraudulent communications. Anyone who believes they have shared personal information or images in response to a scam should contact Police Scotland on 101 and seek appropriate support and guidance.
Key Facts
- The fraudulent email was sent from a non-NHS address impersonating a health professional
- NHS Western Isles communicates with patients only through official letters or telephone calls, never personal email
- NHS staff never request photographs or videos via email for screening assessment
- Patients who have shared information should contact Police Scotland on 101
- The health board is conducting a full review of the incident
