\n<\/p>\n
NHS vendor Advanced will pay just over \u00a33 million ($3.8 million) in fines for not implementing basic security measures before it suffered a ransomware attack in 2022, the U.K.\u2019s data protection regulator has confirmed<\/a>.\u00a0<\/p>\n It\u2019s half the fine that the Information Commissioner\u2019s Office had initially sought<\/a> in August 2024, when the data watchdog said it was going to fine Advanced more than \u00a36 million for its security failings.\u00a0<\/p>\n The ICO said Wednesday that Advanced \u201cbroke data protection law\u201d by not fully rolling out multi-factor authentication prior to its breach, which allowed hackers to break in with stolen credentials and steal the personal information of tens of thousands of people across the United Kingdom.<\/p>\n The LockBit ransomware attack on Advanced caused widespread outages across the NHS<\/a>, including patient data systems that Advanced maintains on behalf of the NHS.\u00a0<\/p>\n In a statement, Advanced confirmed that it had settled the matter. Advanced declined to name a spokesperson when asked by TechCrunch.<\/p>\n<\/div>\n