Advanced Computer Software Group
Disclosed Aug 6, 20242 years ago79,404 affectedSettled
LockBit ransomware on NHS supplier hit 79,404 people; ICO fine of GBP 3.07M
In August 2022 attackers entered Advanced's health and care systems through a customer account without MFA and deployed ransomware, disrupting NHS 111 and patient record access. The ICO provisionally proposed a fine over GBP 6M in 2024 and finalised a GBP 3.07M penalty in March 2025.
What is known
| People affected | 79,404 (as reported by the organization) |
|---|---|
| Disclosed | Aug 6, 2024 |
| Discovered | Aug 2022 |
| Attack | Ransomware |
| Data exposed | Health, Names, Addresses |
| Sector | Healthcare · GB |
| Status | Settled |
| Lawsuit or fine | GBP 3.07M ICO fine (March 2025) (about $4M) |
Sources
| Source | |
|---|---|
| ICO: Advanced Computer Software Group Limitedico.org.uk · Regulator | Regulator |
| UK data watchdog to fine NHS vendor Advancedtechcrunch.com · News | News |
Notices filed
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.