09/06/2026
Mid and South Essex NHS Trust didn't have a security failure. Their supplier did. The patients paid the price. 😬
The breach at Mid and South Essex NHS Foundation Trust came through Synnovis, a third-party testing provider. Data from 2,380 patient records was taken from their computer drives and later shared on the dark web. The attack occurred in 2024 but has only recently been confirmed following investigation.
Your organisation's data doesn't stop being your responsibility when it leaves your systems. 🔐
This is a reminder that good cyber hygiene extends beyond your own infrastructure. It is essential to know who has access to your data, assess supplier security standards, and have a tested incident response plan in place before you need one.
Find the link to the full story in the comments.