Mon, 10 Mar 2025

Mon, 10 Mar 2025 Software bug at firm left NHS data 'vulnerable to hackers'

The NHS is looking into claims that a software flaw at Medefer left patient data vulnerable.

* The NHS is investigating allegations that patient data was left vulnerable to hacking due to a software flaw at private medical services company Medefer.
* A software engineer discovered the flaw in November, which made Medefer's internal patient record system vulnerable to hackers.
* The engineer believes the problem had existed for at least six years, but Medefer disputes this and claims there is no evidence of a breach.
* The flaw was fixed in 48 hours after being reported, but critics argue that the company should have brought in external cybersecurity experts immediately.
* An external security agency has been commissioned to review Medefer's data management systems and will complete its report later this week.
* Cybersecurity experts are concerned about the potential for patient data to be compromised, even if there is no evidence of a breach yet.
* The NHS says it takes concerns over data security seriously and will take further action if necessary.
* Medefer has reported the issue to the ICO and CQC and claims that all its data systems are currently secure.
  >>