Dear Patient,
On Monday 14th April around 90 emails were hacked in our email system, of individuals who have emailed doctor@LSAH.co.uk in the past or where doctor@LSAH.co.uk has emailed them. We believe that this breach occurred as we were sent a phishing email with an attachment that one of our staff clicked on. In turn this allowed access to a set of emails on our email account, and a phishing email was sent to those emails.
Our email system is run separately from our secure medical CRM system and we do not store any contact data on our email system such as addresses or phone numbers. No other data was affected apart from these 90 email addresses.
The data leaked was those 90 email addresses and no further personal data as we do not store personal data (such as phone numbers or addresses) on our email system.
We decided to communicate the event to all patients who have attended our clinic over the years, whether affected or not.
We store patient medical, personal and financial data separately in a secure medical CRM system and have confirmed there was no data breach of that system, which is used by thousands of healthcare providers.
We have been able to implement enhanced security on our email system, to further minimise spam or phishing schemes getting to our staff.
We have reported the breach to the Information Commissioner’s Office, who we are registered with.
If you are concerned and think you may have clicked on a link on this or any other phishing emails, the National Cyber Security Centre recommends taking these actions:
https://www.ncsc.gov.uk/section/respond-recover/sole-phishing
We apologise for any inconvenience or concern this may have caused.
Yours sincerely,
Management and Directors of The London Skin and Hair Clinic
The post Email Phishing Scam ‘Court Order’ appeared first on The London Skin And Hair Clinic.
