UK data watchdog to fine NHS vendor Advanced for security failures prior to LockBit ransomware attack

U.K. data protection authorities provisionally fined NHS software vendor Advanced £6.09M after an August 2022 ransomware attack—attributed by investigators to LockBit malware—that exploited a customer account without multi-factor authentication, caused widespread disruption to NHS services (including 111 outages), and led to theft of data for about 83,000 people, including medical records and entry details for vulnerable patients.