NHS Software Provider Faces Mighty £6M Fine Over Ransomware Fiasco
The UK’s data protection watchdog plans to fine Advanced Computer Software Group £6.09 million for a 2022 ransomware attack. The NHS had to revert to pen-and-paper operations, and sensitive data of 82,946 people was stolen. Information Commissioner John Edwards emphasizes the importance of multi-factor authentication.
Hot Take:
When your IT security is so bad that even a pencil is more reliable, you know you have a problem. Way to go, Advanced Computer Software Group! You managed to make pen-and-paper operations seem like cutting-edge technology in 2022!
Key Points:
- The UK’s ICO plans to fine Advanced Computer Software Group £6.09 million for a 2022 ransomware attack.
- Incident forced NHS’s non-emergency 111 line back to pen-and-paper operations for weeks.
- Attackers used legitimate credentials and exploited lack of multi-factor authentication (MFA).
- 82,946 people’s data, including sensitive medical records and home access details, were stolen.
- ICO’s provisional findings highlight severe security failings and the need for organizations to prioritize information security.
Already a member? Log in here