What Happened:
The UK Information Commissioner’s Office (ICO) has provisionally decided to impose a £6.09 million fine on Advanced Computer Software Group Ltd (Advanced) after a ransomware attack in August 2022.
This attack disrupted NHS and social care services and exposed the personal information of 82,946 people, including sensitive data such as medical records and home entry details for individuals receiving care.
The breach occurred when hackers accessed Advanced’s systems via a customer account that lacked multi-factor authentication.