NHS software services provider Advanced Computer Software Group has been fined £3.07 million by the Information Commissioner’s Office due to security lapses.
The ransomware attack on Advanced's health and care subsidiary resulted in the personal data of 79,404 people being at risk.
Hackers gained access to patients' phone numbers, medical records, and details of 890 people receiving home care.
The Information Commissioner's Office criticized Advanced for insufficient security measures and lack of complete multi-factor authentication coverage.