'MAJOR COMPROMISE' AT NHS TEMPING ARM EXPOSED GAPING SECURITY HOLES

Summary from the TLDR InfoSec newsletter

NHS Professionals, which provides temporary staff to NHS trusts, suffered a cyberattack in May 2024 when criminals stole its Active Directory database containing user credentials. Despite claiming no data was compromised, internal reports confirm the theft. The organization lacked proper security measures like multi-factor authentication and endpoint detection systems.