Get the latest tech news

NHS vendor Advanced to pay £3M fine following 2022 ransomware attack


NHS vendor Advanced will pay just over £3 million ($3.8 million) in fines for not implementing basic security measures before it suffered a ransomware

NHS vendor Advanced will pay just over £3 million ($3.8 million) in fines for not implementing basic security measures before it suffered a ransomware attack in 2022, the U.K.’s data protection regulator has confirmed. It’s half the fine that the Information Commissioner’s Office had initially sought in August 2024, when the data watchdog said it was going to fine Advanced more than £6 million for its security failings. The ICO said Wednesday that Advanced “broke data protection law” by not fully rolling out multi-factor authentication prior to its breach, which allowed hackers to break in with stolen credentials and steal the personal information of tens of thousands of people across the United Kingdom.

Get the Android app

Or read this on TechCrunch

Read more on:

Photo of Advanced

Advanced

Photo of ransomware attack

ransomware attack

Photo of M fine

M fine

Related news:

News photo

NHS software provider fined £3m over data breach after ransomware attack

News photo

The NHS security culture problem is a crisis years in the making

News photo

Software bug at firm left NHS data 'vulnerable to hackers'