Provisional decision to impose £6m fine on software provider following 2022 ransomware attack that disrupted NHS and social care services

We have provisionally decided to fine Advanced Computer Software Group Ltd (Advanced) £6.09m, following an initial finding that the provider failed to implement measures to protect the personal information of 82,946 people, including some sensitive personal information.  
Advanced provides IT…