Back Databreaches

Guernsey medical practice sanctioned after cyber criminals access patient data through email account

Databreaches •Dissent • February 14, 2026

itv reports: Guernsey’s Data Protection Authority (ODPA) has sanctioned First Health after it failed to implement sufficient security measures to prevent a phishing attack. The cybersecurity breach saw fraudsters successfully target an employee’s email account, gaining access to confidential health data at the medical practice. First Health became aware and reported the data breach... Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Guernsey Medical Practice Sanctioned for Phishing Attack Exposing Patient Data First Health, a medical practice in Guernsey, was sanctioned by the Data Protection Authority (ODPA) after a phishing attack compromised an employee's email account, allowing cyber criminals to access confidential patient data. The breach was reported by First Health following the incident, which highlighted inadequate security measures in place to protect sensitive information. 3 sources 35

Extracted Entities

Guernsey medical practice sanctioned after cyber criminals access patient data through email account

The full story

Extracted Entities

Attack Types (2)

Companies (1)

MITRE ATT&CK (1)