{"id":2321,"date":"2024-08-06T23:43:36","date_gmt":"2024-08-06T23:43:36","guid":{"rendered":"https:\/\/260web.com\/news\/watchdog-to-fine-nhs-it-firm-6m-after-medical-records-hack\/"},"modified":"2024-08-06T23:43:36","modified_gmt":"2024-08-06T23:43:36","slug":"watchdog-to-fine-nhs-it-firm-6m-after-medical-records-hack","status":"publish","type":"post","link":"https:\/\/260web.com\/news\/watchdog-to-fine-nhs-it-firm-6m-after-medical-records-hack\/","title":{"rendered":"Watchdog to fine NHS IT firm \u00a36m after medical records hack"},"content":{"rendered":"<p>Watchdog to fine NHS IT firm \u00a36m after medical records hack<\/p>\n<div data-component=\"image-block\" class=\"ssrcss-xza2yt-ComponentWrapper ep2nwvo1\">\n<figure class=\"ssrcss-8589xk-StyledFigure e34k3c23\">\n<div class=\"ssrcss-ab5fd8-StyledFigureContainer e34k3c21\"><span class=\"ssrcss-fmt1c3-Placeholder etlorgc0\"><picture><source srcset=\"https:\/\/ichef.bbci.co.uk\/news\/240\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg.webp 240w, https:\/\/ichef.bbci.co.uk\/news\/320\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg.webp 320w, https:\/\/ichef.bbci.co.uk\/news\/480\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg.webp 480w, https:\/\/ichef.bbci.co.uk\/news\/624\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg.webp 624w, https:\/\/ichef.bbci.co.uk\/news\/800\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg.webp 800w, https:\/\/ichef.bbci.co.uk\/news\/976\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg.webp 976w\" type=\"image\/webp\"><img fetchpriority=\"high\" decoding=\"async\" alt=\"The NHS logo - the word written in a white font on a blue background\" loading=\"eager\" src=\"https:\/\/260web.com\/news\/wp-content\/uploads\/2024\/08\/KgTqQy.jpg\" srcset=\"https:\/\/ichef.bbci.co.uk\/news\/240\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg 240w, https:\/\/ichef.bbci.co.uk\/news\/320\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg 320w, https:\/\/ichef.bbci.co.uk\/news\/480\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg 480w, https:\/\/ichef.bbci.co.uk\/news\/624\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg 624w, https:\/\/ichef.bbci.co.uk\/news\/800\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg 800w, https:\/\/ichef.bbci.co.uk\/news\/976\/cpsprodpb\/69d6\/live\/3e2963f0-540e-11ef-b8c3-f76c0a5f70a8.jpg 976w\" width=\"1024\" height=\"576\" class=\"ssrcss-11yxrdo-Image edrdn950\"><\/picture><\/span><span role=\"text\" class=\"ssrcss-tvuve5-StyledFigureCopyright e34k3c20\">Getty Images<\/span><\/div>\n<\/figure>\n<\/div>\n<div data-component=\"metadata-block\" class=\"ssrcss-xza2yt-ComponentWrapper ep2nwvo1\">\n<div>\n<ul role=\"list\" class=\"ssrcss-j4gvkq-MetadataStripContainer eh44mf03\">\n<div class=\"ssrcss-13nu8ri-GroupChildrenForWrapping eh44mf02\">\n<li role=\"listitem\" class=\"ssrcss-30fcoe-MetadataStripItem eh44mf01\">\n<div class=\"ssrcss-m5j4pi-MetadataContent eh44mf00\"><span class=\"ssrcss-1pvwv4b-MetadataSnippet e4wm5bw3\"><span class=\"ssrcss-1if1g9v-MetadataText e4wm5bw1\"><time data-testid=\"timestamp\" datetime=\"2024-08-06T23:04:10.792Z\">37 minutes ago<\/time><\/span><\/span><\/div>\n<\/li>\n<\/div>\n<\/ul>\n<\/div>\n<\/div>\n<div data-component=\"text-block\" class=\"ssrcss-uf6wea-RichTextComponentWrapper ep2nwvo0\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\"><b class=\"ssrcss-1xjjfut-BoldText e5tfeyi3\">The Information Commissioner&#8217;s Office (ICO) has provisionally imposed a \u00a36m fine on an NHS software provider over a data breach which affected more than 80,000 people.<\/b><\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The breach took place in 2022 and included sensitive personal information including medical records and &#8220;how to gain entry to the homes of 890 people&#8221;.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">But the ICO stressed it was a provisional fine, and it would wait to hear from Advanced Computer Software Group before making a final decision.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">It said its initial findings were that personal information belonging to 82,946 people had been &#8220;exfiltrated&#8221; by hackers.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;Not only was personal information compromised, but we have also seen reports that this incident caused disruption to some health services, disrupting their ability to deliver patient care,&#8221; said John Edwards, the Information Commissioner. <\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;A sector already under pressure was put under further strain due to this incident.&#8221;<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The ICO said people who had been affected by the hack had been notified, and Advanced had not been able to find evidence that information had been leaked on the dark web.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Criminal hackers took offline seven of Advanced&#8217;s health systems, including software used for patient check-ins, medical notes and the NHS 111 service.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Doctors told the BBC at the time it could take months to process mounting piles of medical paperwork caused by the cyber-attack.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">It left some GP services forced to take notes using pen and paper rather than using electronic systems.<\/p>\n<\/div>\n<\/div>\n<div data-component=\"image-block\" class=\"ssrcss-xza2yt-ComponentWrapper ep2nwvo1\">\n<figure class=\"ssrcss-8589xk-StyledFigure e34k3c23\">\n<div class=\"ssrcss-ab5fd8-StyledFigureContainer e34k3c21\"><span class=\"ssrcss-209cjn-Placeholder etlorgc0\"><span><\/p>\n<div><picture><source srcset=\"https:\/\/ichef.bbci.co.uk\/news\/240\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png.webp 240w, https:\/\/ichef.bbci.co.uk\/news\/320\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png.webp 320w, https:\/\/ichef.bbci.co.uk\/news\/480\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png.webp 480w, https:\/\/ichef.bbci.co.uk\/news\/624\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png.webp 624w, https:\/\/ichef.bbci.co.uk\/news\/800\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png.webp 800w, https:\/\/ichef.bbci.co.uk\/news\/976\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png.webp 976w\" type=\"image\/webp\"><img decoding=\"async\" alt=\"Boxes filled with paper, there are around twenty boxes, which could contain many thousands of pieces of paper, which presumably all have patient information on them\" loading=\"lazy\" src=\"https:\/\/260web.com\/news\/wp-content\/uploads\/2024\/08\/gOR4kg.png\" srcset=\"https:\/\/ichef.bbci.co.uk\/news\/240\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png 240w, https:\/\/ichef.bbci.co.uk\/news\/320\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png 320w, https:\/\/ichef.bbci.co.uk\/news\/480\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png 480w, https:\/\/ichef.bbci.co.uk\/news\/624\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png 624w, https:\/\/ichef.bbci.co.uk\/news\/800\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png 800w, https:\/\/ichef.bbci.co.uk\/news\/976\/cpsprodpb\/eab5\/live\/39cef560-540c-11ef-b8c3-f76c0a5f70a8.png 976w\" width=\"1536\" height=\"863.8015161957271\" class=\"ssrcss-11yxrdo-Image edrdn950\"><\/picture><\/div>\n<p><\/span><\/span><span role=\"text\" class=\"ssrcss-tvuve5-StyledFigureCopyright e34k3c20\">BBC\/Fay Wilson<\/span><\/div>\n<\/figure>\n<\/div>\n<div data-component=\"text-block\" class=\"ssrcss-uf6wea-RichTextComponentWrapper ep2nwvo0\">\n<div class=\"ssrcss-7uxr49-RichTextContainer e5tfeyi1\">\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">The hackers were able to gain access to the information by using a customer&#8217;s account which did not have sufficient protection.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">But the ICO says it believed Advanced should have implemented measures to protect against this vulnerability. <\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">\u201cI am choosing to publicise this provisional decision today as it is my duty to ensure other organisations have information that can help them to secure their systems and avoid similar incidents in the future,&#8221; said Mr Edwards. <\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;I urge all organisations, especially those handling sensitive health data, to urgently secure external connections with multi-factor authentication.\u201d<\/p>\n<\/div>\n<\/div>\n<p>Published at Tue, 06 Aug 2024 23:04:10 +0000<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Watchdog to fine NHS IT firm \u00a36m after medical records hack Getty Images 37 minutes ago The Information Commissioner&#8217;s Office (ICO) has provisionally imposed a \u00a36m fine on an NHS software provider over a data breach which affected more than 80,000 people. The breach took place in 2022 and included sensitive personal information including medical&hellip; <a class=\"more-link\" href=\"https:\/\/260web.com\/news\/watchdog-to-fine-nhs-it-firm-6m-after-medical-records-hack\/\">Continue reading <span class=\"screen-reader-text\">Watchdog to fine NHS IT firm \u00a36m after medical records hack<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":2320,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-2321","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","entry"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/posts\/2321","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/comments?post=2321"}],"version-history":[{"count":0,"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/posts\/2321\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/media\/2320"}],"wp:attachment":[{"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/media?parent=2321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/categories?post=2321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/260web.com\/news\/wp-json\/wp\/v2\/tags?post=2321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}