NHS software provider fined £3m over data breach after ransomware attack

NHS software provider fined £3m over data breach after ransomware attack The breach took place in August 2022 , when hackers gained access to patients' phone numbers and medical records as well as details of how to gain entry to the homes of 890 people receiving care at home. The firm provides IT and software services to organisations around the country, including the NHS and other health providers, handling information in its role as a data processor. The Advanced Computer Software Group was fined for a breach that put personal information of 79,404 people at risk, the UK's data protection watchdog said. An NHS software provider has been fined £3m by the Information Commissioner's Office (ICO) over security failings that led to a ransomware attack on the NHS. The unidentified hackers were able to gain access to the information by using a customer's account that did not have sufficient protection in the form of multi-factor authentication. The regulator's investigation concluded ... Read full article.