LockBit 3.0 malware forced NHS tech supplier to shut down hosted sites

Advanced, a managed software provider to the UK National Health Service, has confirmed that customer data was indeed lifted as part of the attack by cyber baddies that has disrupted operations for months. The attack was first noted August 4 when Advanced promptly pulled a portion of its infrastructure offline to contain the …

[VoiceOfTruth]

Data? What data?

-> queried the nature of the data that was exfiltrated

I'm glad The Reg has asked that. We often read in reports about "limited number of customers" and "some customer data" and so on, which is the PR equivalent of "how long is a piece of string". I have no reason to believe that Advanced is being economical with its account, but it would be better if they expressed it more clearly.

-> Advanced has now informed those customers

Customers being the NHS trusts and whatever that they provide services to, but presumably not to the subjects of the affected data?

[Anonymous Coward]

Re: Data? What data?

Carenotes is a mental health ePatient record system

I would suggest that these records have the potential to be used more readily than an acute EPR system due to the stigma of mental health conditions that have been kept private from employers and the press.

There is also no mention whether Advanced's own credentials to support on premise systems within NHS Trusts internal datacentres have or have not been compromised.

ANON because ex-NHS