Skip to content
NHS Scotland Faces Major Data Breaches and Cyber Attacks

NHS Scotland Faces Major Data Breaches and Cyber Attacks

First seen 10 Jul 2026, 09:22 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 1, 2026 at 14:16 UTC
  • •NHS Scotland reported over 5,000 data breaches in four years, raising serious concerns.
  • •Unauthorized access incidents include staff looking at patient records out of curiosity.
  • •A cyber attack on NHS Dumfries and Galloway has put patient and staff data at risk.

NHS Scotland has reported over 5,000 data breaches in the past four years, with incidents including unauthorized access to patient records and a significant cyber attack on NHS Dumfries and Galloway. Recent investigations revealed staff members at Cambridge University Hospitals accessed a child's medical records without justification, prompting warnings from NHS leadership about potential jail time for such breaches. The Information Commissioner's Office (ICO) has been involved in multiple cases, including a notable incident at NHS Lothian where a staff member accessed records of around 100 patients, leading to a police charge. The breaches have raised serious concerns about data protection practices within the NHS, emphasizing the need for better safeguards against unauthorized access. As investigations continue, health boards are urged to improve their data protection measures to prevent future incidents.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2026-07-09
NHS staff warned over unauthorized access
NHS chief condemned staff for accessing patient records without valid reasons, launching a new awareness campaign.
Cambridge-News
2026-07-10
Cyber attack on NHS Dumfries and Galloway
NHS Dumfries and Galloway reported a cyber attack risking patient-identifiable data, prompting a swift response.
Scotsman
2026-07-12
NHS Scotland data breaches revealed
More than 5,000 data breaches reported by NHS boards, including unauthorized access and cyber attacks.
Theferret.Scot

More articles in this cluster (7)

Common questions

What types of data breaches occurred?
The breaches include unauthorized access to patient records, staff snooping, and a significant cyber attack.
How many patients were affected by the NHS Lothian breach?
Around 100 patients had their medical records accessed inappropriately by one individual.
What actions are being taken against staff involved in breaches?
Staff members involved in unauthorized access may face disciplinary actions, including dismissal and potential criminal charges.