UK fines software provider £3.07 million for 2022 ransomware breach

The UK ICO fined Advanced Computer Software £3.07M for a 2022 LockBit ransomware breach that used compromised credentials and RDP access to a Citrix server to move laterally, exposing sensitive data for 79,404 people and causing NHS service outages; the penalty cited poor vulnerability scanning, inadequate patch management, and incomplete MFA coverage.