NHS Blood Tests Leaked Two Years Later, Dashlane 2FA Brute-Forced & FIFA Scam Sites Already Live

[percussive music] And this week's Breach of the Week comes from Bedfordshire hospitals.

Your NHS blood test results from 2015 just got leaked in 2026.

So this is, uh, this is, j- just goes to show how these things don't go away quickly.

This one lands because no one was doing anything wrong.

People went to hospital, they had a blood test or a scan, and just trusted that their records were gonna be looked after.

So this is the June 2024 Synnovis ransomware incident.

We've spoken about that loads here, because the Synnovis happened lots and lots, didn't it? You know, it's, this was where Synnovis did pathology services for the NHS.

Um, they got compromised, got ransomware, I think, and the whole pathology system kind of broke down for lots of hospitals.

People died.

They've actually tied a death to this very incident.

So because of this Synnovis breach, someone died.

Operations were canceled, postponed.

So it's mad.

And what's happened is patients at Bedford Hospital and Luton & Dunstable Hospital, so this is right on our doorstep, patients there between 2011 and 2020, um, their data has now been potentially affected, 32,927 patients.

It's mad that they're only just now being notified, really.

So yes, it w- the trust wasn't at fault.

It was their supplier, third-party supplier.

Again, third parties we always talk about.

Um, a court injunction has been obtained to prevent sharing or misuse of the stolen data.

I'm sure that's gonna work.

And affected individuals are advised to stay alert to unsolicited contact or phishing attempts.

So apparently, the data was so jumbled and fragmented that forensic specialists needed over a year just to figure out whose information was in there.

So two years later, only now is a letter dropping through someone's door saying that their NHS number and their test results might be out there, which is mad.

Two years.

The data was so bad that this had to happen.