Advanced Computer Software: Difference between revisions

Revision as of 09:54, 7 August 2024

Revision as of 02:48, 9 August 2024

Line 43:

In August 2022, the company experienced a cybersecurity incident caused by [[LockBit|LockBit 3.0]] ransomware.<ref>{{Cite news |date=2022-08-05 |title=NHS 111 software outage confirmed as cyber-attack |language=en-GB |work=BBC News |url=https://www.bbc.com/news/uk-wales-62442127 |access-date=2023-11-13}}</ref> Adastra, Caresys, Odyssey, Carenotes, Crosscare, Staffplan and eFinancials products were all affected, with downtime and recovery lasting for several months.

Perpetrators of the attack were able to extract information relating to 16 Staffplan and Caresys customers.<ref>{{Cite web |date=2022-10-13 |title=Client data exfiltrated in Advanced NHS cyber attack |url=https://www.digitalhealth.net/2022/10/client-data-exfiltrated-advanced-nhs-cyber-attack/ |access-date=2022-10-27 |website=Digital Health |language=en-GB}}</ref>. 82,946 people were affected by the breach which included phone numbers and medical records, as well as details of how to gain entry to the homes of 890 people who were receiving care at home. <ref name=":1">{{Cite web |date=2024-08-07 |title=Provisional decision to impose £6m fine on software provider following 2022 ransomware attack that disrupted NHS and social care services |url=https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/08/provisional-decision-to-impose-6m-fine-on-software-provider-following-2022-ransomware-attack/ |access-date=2024-08-07 |website=ico.org.uk |language=en}}</ref>

The cyber attack including resulting remediation and outage credits cost the group £18.2 million in 2023 with a further £2.7 million provisioned for additional expenditure in future years.<ref name=":0" />