NHS Data Breach: Sensitive Patient Information Exposed via Unencrypted Pagers

• •NHSBT admitted to transmitting sensitive patient data over unencrypted pagers.
• •The breach included names, dates of birth, and organ information of transplant patients.
• •NHSBT has reported the incident to the ICO and stopped using pagers for patient data.

The NHS Blood and Transplant (NHSBT) has admitted to a data breach involving the unencrypted transmission of sensitive medical data for transplant patients over a pager network. This breach, uncovered by a BBC investigation, included patients' names, dates of birth, organ requirements, and tissue-match scores. Although NHSBT has reported the incident to the Information Commissioner's Office (ICO) and ceased using the pager system for patient data, the extent of the exposure remains unclear due to the nature of pagers, which cannot track recipients. The breach also affected other emergency services, with hundreds of messages sent over a 10-day period containing various sensitive information. NHSBT's head of organ transplantation acknowledged the vulnerability and stated that urgent measures have been taken to prevent future incidents.