The UK Information Commissioner’s Office fined Advanced Computer Group Ltd £3.07 million due to a ransomware attack, compromising NHS data and encrypting systems, affecting personal data of 79,404 people. This marked the first fine against a data processor by ICO. The incident disrupted crucial services like NHS 111 and limited healthcare staff access to patient records, with data such as phone numbers, medical records, and home access details for 890 in-home care recipients stolen. The ICO highlighted Advanced Computer Group Ltd's failure in implementing adequate technical and organizational security measures to protect health and care systems.
"id": "adv1047032725",
"linkid": "advanced-computer-solutions-llc",
"type": "Breach",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"