Software bug at firm left NHS data 'vulnerable to hackers'

The NHS is "looking into" allegations that patient data was left vulnerable to hacking due to a software flaw at a private medical services company.

The flaw was found last November at Medefer, which handles 1,500 NHS patient referrals a month.

The software engineer who discovered the flaw believes the problem had existed for at least six years.

Medefer says there is no evidence the flaw had been in place that long and stressed that patient data has not been compromised.

The flaw was fixed a few days after being discovered.

In late February the company commissioned an external security agency to undertake a review of its data management systems.

An NHS spokesperson said: "We are looking into the concerns raised about Medefer and will take further action if appropriate."

Read full story

Source: BBC News, 10 March 2025