The Manchester University hack earlier this month may have been more severe than just compromising University staff and student data.

← Back to Blog

The Manchester University hack earlier this month may have been more severe than just compromising University staff and student data. As NHS numbers may have been compromised. Interestingly there is no confirmation of whether patient names were hacked, that implies that researchers don’t yet know if patient names are involved (how can you not know). Raising questions of why would researchers need names and NHS number to conduct research on behalf of the NHS, and would names have been anonymised?

‘Some patients will not know they are on the database, launched in 2012, as they did not need to give consent to be recorded on it.’

If proven correct then there is a GDPR failure, that surely raises questions of legal liability.

Ted Dziekanowski Rachel V. Rose, JD, MBA Stephen Pitt-Walker, JD, FGIA Jamie Foster

#cybersecurity #cyberriskmanagement

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7080639189544804352

Categories

Cybersecurity, Regulation & Compliance

Tags