Archive — US — techcrunch
Tech provider for NHS England confirms data breach
DXS International, a healthcare tech provider for NHS England, confirmed a data breach discovered on December 14. A ransomware group, DevMan, claimed responsibility, stating they stole 300 GB of data. DXS has contained the incident, maintaining operational services, and notified relevant authorities, including the UK's Information Commissioner's Office.
Key points
- DXS International experienced a security incident affecting office servers, detected on December 14.
- A ransomware group called DevMan claimed responsibility and stated they stole 300 GB of data.
- The breach had minimal impact on DXS’s services and front-line clinical services remained operational.
- DXS responded quickly, working with NHS and hiring cybersecurity experts.
- The company informed law enforcement and the ICO regarding the incident, which is currently being assessed.
Why it matters
- This incident reflects the increasing occurrence of cyberattacks targeting healthcare providers, as seen in prior attacks on the NHS and other health services worldwide.
- Data breaches pose significant risks to personal medical information, similar to past incidents that have raised awareness about cybersecurity in healthcare.
- The incident highlights ongoing challenges in safeguarding digital medical systems amid the increasing adoption of technology in healthcare by 2025.
The DXS International data breach underscores the persistent cybersecurity threats in the healthcare sector, prompting a need for enhanced protective measures and vigilance as digital systems become more integral to patient care.