Know What's Happening in Healthcare

Guernsey Medical Practice Sanctioned After Cyber Criminals Access Patient Data Through Email Account

Guernsey’s Data Protection Authority has sanctioned First Contact Health after a phishing attack compromised an employee’s email, exposing confidential patient data. The breach was discovered by the practice, which reported it to authorities, but regulators found the organization lacked adequate security controls such as multi-factor authentication. As a result, the DPA imposed a monetary penalty and mandated remedial measures. The incident underscores growing cyber risk in the healthcare sector.