NHS contractor fined after ransomware attack

After a damaging 2022 ransomware breach disrupted NHS services, the tech vendor responsible has agreed to pay a multimillion-pound fine, with regulators citing serious failures in basic cyber protection.
UK contractor fined for ransomware attack on the NHS violating millions of UK patent's data. Computer, Computer Hardware, Computer Keyboard, Electronics, Hardware

The tech firm Advanced, which provides services to the NHS, has been fined over £3 million by the UK data watchdog following a major ransomware attack in 2022.

The breach disrupted NHS systems and exposed personal data from tens of thousands across the country.

Originally facing a £6 million penalty, Advanced saw the fine halved after settling with the Information Commissioner’s Office.

Regulators said the firm failed to implement multi-factor authentication, allowing hackers to access systems using stolen login details.

The LockBit attack caused widespread outages, including access to UK patient data. While Advanced acknowledged the resolution, it declined to offer further comment or name a spokesperson when contacted.

For more information on these topics, visit diplomacy.edu.