Guernsey Medical Practice Sanctioned for Phishing Attack Exposing Patient Data

Guernsey Medical Practice Sanctioned for Phishing Attack Exposing Patient Data

First seen 14 Feb 2026, 15:09 UTC ItvDatabreaches 34.7

Article Content

Browse articles
ThreatCluster

First Health, a medical practice in Guernsey, was sanctioned by the Data Protection Authority (ODPA) after a phishing attack compromised an employee's email account, allowing cyber criminals to access confidential patient data. The breach was reported by First Health following the incident, which highlighted inadequate security measures in place to protect sensitive information.

Timeline

2026-02-13
ODPA sanctions First Health for insufficient security measures
2026-02-14
First Health reports the data breach to authorities