Ransomware Attack Threatens Software Supplier with £6 Million Fine: ICO Urges Immediate Multi-Factor Authentication
Posted on in Data Protection
The ICO has provisionally decided to issue a fine to Advanced, an IT software company providing services to the NHS, after it experienced a ransomware hack in August 2022.
Cyber threats are increasing and AI is expected to heighten the global ransomware according to GCHQ. Government statistics from 2024 show that half of businesses (50%) and a third of charities (32%) report having experienced some form of cyber security breach or attack in the last 12 months. This is much higher for:
- Medium businesses - 70%
- Large businesses - 74%
- High-income charities with £500,000 or more in annual income - 66%.
In this insight, we discuss what we know so far about the breach, refer to the regulatory framework and explain how Tozers can assist your business with GDPR.
What do we know so far?
The ICO has provisionally found that hackers initially accessed a number of Advanced's health and care systems via a customer account that did not have multi-factor authentication. They provisionally report that personal>Data Protection Team can help you comply with the regulatory framework by:
- Providing advice and guidance.
- Discuss>Contact our legal experts