UK IT provider faces $7.7 million fine for 2022 ransomware breach

The UK's Information Commissioner's Office has provisionally fined Advanced Computer Software Group £6.09M after a ransomware incident on 4 August 2022 that impacted NHS services and numerous healthcare products, exposing personal data for nearly 83,000 people (including home-access instructions for 890 care recipients); the ICO cited failures to apply updates, enable multi-factor authentication, and manage vulnerabilities, and the penalty remains provisional while Advanced responds, with no evidence that stolen data was published to the dark web.