Former cyber security boss ‘believes a Russian group’ is behind the NHS ‘major IT incident’ NHS Asked on BBC Radio 4’s Today programme if it is known who attacked Synnovis, Ciaran Martin said: “Yes. We believe it is a Russian group of cyber criminals who call themselves Qilin.