logo

Ransomwared NHS software supplier nabs £3M discount from ICO for good behavior

ID: 763dbe11-6f91-5533-afdf-eb64d3756868

STIX ID: report--763dbe11-6f91-5533-afdf-eb64d3756868

Feed Name: The Register (Security)

Threat Score
75/100

Date Published: 2025-03-27

Date Updated: 2026-04-26

Author: Connor Jones

...
...

**Executive summary:** In August 2022 the LockBit ransomware gang breached Advanced Health and Care via a customer account lacking MFA, stole 79,404 people's data (including 890 vulnerable home-care patients), and caused weeks-to-months disruption to NHS services; the ICO fined the company £3.07M citing incomplete MFA, missing vulnerability scans, and inadequate patch management after the firm cooperated with authorities and took mitigation steps.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.