NHS Highland staff ‘poor practice’ sparks fears of heightened risk of a major cyber attack


NHS Highland is at heightened risk of falling prey to a major cyber attack in part due to “poor practice” by some staff members. The warning, contained in a report to the board assessing risk levels faced in a range of areas against what is deemed an acceptable level of risk, comes as the busy winter period for the NHS – when demand on services soars – is beginning to bite.

It states that here is “a risk of poor practice across cyber-security, information governance” as well as other areas such as health and safety and infection control “due to poor compliance with statutory and mandatory training requirements resulting in possible data breaches” as well as “injury or harm to colleagues or patients, poor standards of quality and care, reputational damage, prosecution or enforcement action.”

Read more…
Source: The Inverness Courier News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Google Cloud services down in UK; banks, public sector report issues

    October 20, 2026

    A disruption at Google’s cloud operations in London on Tuesday affected the websites and mobile apps of several banks, financial firms and public service providers in ​the region, highlighting how businesses and services have become critically dependent on digital ‌infrastructure. British digital bank Revolut has suffered a service outage related to the disruption in Alphabet’s (GOOGL.O), ...

  • Hobbs and Whistles owner investigates hack that may have exposed customer data

    October 13, 2026

    The owner of Phase Eight, Hobbs and Whistles has said its websites and IT systems have been hit by a cyber-attack that may have compromised customers’ personal data. The South-African listed TFG London said it identified the “cybersecurity incident” at the three UK-based retail chains on Sunday. Its two other UK brands, Inside Story and White ...

  • UK and Germany launch joint-partnership to counter sabotage and cyber attacks

    October 8, 2026

    Prime Minister Andy Burnham will travel to Berlin today for talks with Chancellor Friedrich Merz, as the UK and Germany work together on technologies and industries that will drive growth in every UK postcode, and build resilience against shared threats. The UK and Germany are Europe’s two largest economies and biggest investors in defence and today ...

  • Operation KillSwitch: Teenager suspected of leading KillSec ransomware group

    October 1, 2026

    On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access. The cybercrime group used the site to threaten organisations with the publication of stolen files unless they paid a ransom. The action was part of Operation KillSwitch, an international investigation led by German ...

  • Iranian Cyber Targeting of Dissidents, Activists and Journalists

    September 15, 2026

    CHOSEN BRICK is a malware family that has been used to target individuals around the world including in the UK, US and the Netherlands from at least 2025. CHOSEN BRICK enables Iranian state cyber actors to collect information on a target’s contacts, emails and social media messages, which could enable tracking of their movements. Iran almost ...

  • P&O Ferries data blunder as it sends out passengers’ personal details by text message

    August 31, 2026

    P&O Ferries was hit by a data breach after mistakenly sending out a full list of passengers’ personal details by text message this morning, we can reveal. A blunder saw the details of 432 passengers travelling on the 12pm P&O ferry from Calais to Dover sent as an attachment in a customer services text message. It is ...