HSHHSH Health Technology Supplier Hub
Home › Suppliers › Sophos › Risk

Sophos: risk summary

Summaries are drawn from public sources and link to them. HSH does not give a risk rating: read the summary and sources and reach your own view. Unproven allegations are labelled as such. Suppliers can submit a response, which is shown alongside.

Financial

Latest full-year results from official filings.

Not stock-market listed and no listed parent identified, so no public annual accounts were found.

Financial health not assessed; a credit-agency licence (e.g. Dun & Bradstreet) would be needed.

Researched 8 Nov 2026

Adverse media

Credible news about incidents, disputes, legal action or restructuring in the last 24 months.

Feb 2025: Sophos confirmed it was cutting about 6% of its workforce, removing roles duplicated after its $859m acquisition of Secureworks, which completed earlier that month.

Researched 10 Nov 2026

Cyber & information governance

Data breaches, cyber incidents, regulator action and assurance status.

Dec 2024: Sophos patched three Sophos Firewall vulnerabilities, two rated critical (CVSS 9.8); Sophos said it had not seen them exploited. No breach of Sophos itself or regulator action found. NHS DSPT status not yet checked.

Researched 10 Nov 2026

Regulatory & clinical safety

Recalls, safety notices, regulator action and clinical safety concerns.

Cyber security software supplier; no regulatory or clinical safety actions found in the last 24 months.

Researched 10 Nov 2026

Contract performance

Contract delivery, go-lives, terminations and disputes.

No notable troubled implementations, terminations or customer disputes involving Sophos found in HSH's search of the last 24 months.

Researched 10 Nov 2026