Advanced Computer Software Group
Disclosed Aug 6, 202479,404 affectedSettled
LockBit ransomware on NHS supplier hit 79,404 people; ICO fine of GBP 3.07M
In August 2022 attackers entered Advanced's health and care systems through a customer account without MFA and deployed ransomware, disrupting NHS 111 and patient record access. The ICO provisionally proposed a fine over GBP 6M in 2024 and finalised a GBP 3.07M penalty in March 2025.
What is known
| People affected | 79,404 (as reported by the organization) |
|---|---|
| Disclosed | Aug 6, 2024 |
| Discovered | Aug 2022 |
| Attack | Ransomware |
| Data exposed | HealthNamesAddresses |
| Sector | Healthcare · GB |
| Status | Settled |
| Lawsuit or fine | GBP 3.07M ICO fine (March 2025) (about $4M) |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.