England’s National Health Service was just one of many organizations that was hit hard by the WannaCry Ransomware attack back in May. And while the NHS says that no patient information was compromised and seems to have avoided paying the ransom, that doesn’t mean that the organization was doing a good job with its security implementations. A pre-attack assessment of 88 of the NHS’ 236 trusts found that not a single one passed the required cyber security standards. Further, the NHS was warned by two different government bodies back in 2014 about a potential vulnerability that needed to be patched. It never was. Thus, breached.
