NHS Vendor Faces £6 Million Fine for Ransomware Fumble: No MFA, Major Chaos

NHS vendor Advanced faces a £6 million fine for failing to secure data, leading to a massive ransomware attack. The breach disrupted NHS services, forcing hospitals to use pen and paper. The attack, tied to the LockBit ransomware gang, exposed sensitive information of 83,000 people.

Hot Take:

When your cybersecurity strategy is as strong as a wet tissue, you end up with a £6 million tissue bill. NHS vendor Advanced is discovering that saving on multi-factor authentication (MFA) can be a very expensive mistake!

Key Points:

  • NHS vendor Advanced fined £6 million for inadequate security leading to a ransomware attack.
  • The attack caused significant disruption to NHS services, including the non-emergency 111 line.
  • LockBit ransomware gang suspected, but no public claim of responsibility.
  • ICO determined that the lack of multi-factor authentication was a critical failure.
  • Over 83,000 individuals’ personal information, including medical records, was stolen.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here