NHS Highland staff ‘poor practice’ sparks fears of heightened risk of a major cyber attack


NHS Highland is at heightened risk of falling prey to a major cyber attack in part due to “poor practice” by some staff members. The warning, contained in a report to the board assessing risk levels faced in a range of areas against what is deemed an acceptable level of risk, comes as the busy winter period for the NHS – when demand on services soars – is beginning to bite.

It states that here is “a risk of poor practice across cyber-security, information governance” as well as other areas such as health and safety and infection control “due to poor compliance with statutory and mandatory training requirements resulting in possible data breaches” as well as “injury or harm to colleagues or patients, poor standards of quality and care, reputational damage, prosecution or enforcement action.”

Read more…
Source: The Inverness Courier News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Microsoft disrupts global cybercrime subscription service responsible for millions in fraud losses

    January 14, 2026

    Today, Microsoft is announcing a coordinated legal action in the United States and, for the first time, the United Kingdom to disrupt RedVDS, a global cybercrime subscription service fueling millions in fraud losses. These efforts are part of a broader joint operation with international law enforcement, including German authorities and Europol, which has allowed Microsoft and ...

  • UK government exempting itself from flagship cyber law inspires little confidence

    January 10, 2026

    From May’s cyberattack on the Legal Aid Agency to the Foreign Office breach months later, cyber incidents have become increasingly common in UK government. The scale extends far beyond these high-profile cases: the NCSC reports that 40 percent of attacks it managed between September 2020 and August 2021 targeted the public sector, a figure expected to ...

  • UK unveiled new cyber action plan to tackle threats and strengthen public services

    January 6, 2026

    New measures will be introduced to make online public services more secure and resilient, so people can use them with confidence – whether applying for benefits, paying taxes or accessing healthcare. Backed by over £210 million, the Government Cyber Action Plan published today (Tuesday 6 January) sets out how government will rise to meet the growing ...

  • UK Foreign Office was victim of cyberattack

    December 19, 2025

    The UK Foreign Office was hacked in October, a minister has admitted, raising fears that thousands of confidential documents and data may have been compromised. While ministers are “pretty confident” that visa applicants’ details have not been accessed, they have admitted that they are not confident about the identity of the hacker. Sources told The Sun ...

  • UK: NHS GP software supplier hit by cyber attack

    December 19, 2025

    DXS International which provides healthcare technology for the NHS has disclosed a cyber attack, which has led to data being stolen. The UK-based company provides software that helps to reduce costs for doctors and primary care physicians and is used by around 2,000 GPs which oversee the care of around 17 million patients. In a filing ...

  • LastPass 2022 Data Breach — 1.6 Million Users Exposed By Security Failure

    December 14, 2025

    Any data breach affecting 1.6 million people is big news, especially when it involves one of the most prominent password managers out there: LastPass. The U.K. Information Commissioner’s Office has just fined LastPass £1.2 million ($1.6 million) for failing to “implement sufficiently robust technical and security measures, which ultimately enabled a hacker to gain unauthorised access ...