Last updated
Royal Cornwall Hospitals NHS Trust: Cybersecurity Incident
Royal Cornwall Hospitals NHS Trust suffered a data exposure affecting 8,003 current and former staff and non-trust workers. Sickness absence records were retained in an FOI disclosure spreadsheet and revealed through pivot tables. A review found the subsequent helpline was poorly prepared, placing emotional strain on staff and running for 11 weeks rather than the planned two.
Source: The Register
- Who
- Royal Cornwall Hospitals NHS Trust · UK
- What happened
- Royal Cornwall Hospitals NHS Trust suffered a data exposure affecting 8,003 current and former staff and non-trust workers. Sickness absence records were retained in an FOI disclosure spreadsheet and revealed through pivot tables. A review found the subsequent helpline was poorly prepared, placing emotional strain on staff and running for 11 weeks rather than the planned two.
- When
- 2026-11-07
- Source
- The Register
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For Royal Cornwall Hospitals NHS Trust in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: The wider read — a Talent Market Index of 97.8 (Neutral), down 3.2 month-on-month — shows EMEA signal flow rising (+5.9pts).
Royal Cornwall Hospitals NHS Trust: 1 signal in the last 90 days.
MitchelLake in this thematic
More signals across EMEA
Cybersecurity Incident · EMEA
Technical University of Munich (TUM) →Attackers stole central login passwords for everyone registered with TUM's myTUM portal, then used an admin's credentials to attack TUMonline, forcing the campus management system offline. Disclosed November 6; access restored November 9 with forced password resets.
Cybersecurity Incident · EMEA
Carrefour →Carrefour's French stores were among more than 700 grocery locations hit in October by destructive cyberattacks on refrigeration controllers, causing fires and food losses. France's C4 coordination centre attributes the campaign to the IRGC-linked Shahid Kaveh unit (CyberAv3ngers).
Cybersecurity Incident · EMEA
Casino →Casino group stores were affected by the October cyberattacks on refrigeration controllers across French grocery chains, attributed to Iran-linked actors.
Cybersecurity Incident · EMEA
Metro →Metro cash-and-carry stores in France were affected by the October refrigeration-controller attacks attributed to Iran-linked CyberAv3ngers.
Cybersecurity Incident · EMEA
Wyndham →Hotel group Wyndham exposed customer data through a hardcoded credential left in its customer-facing app, allowing anyone to access customer records. The company declined to say whether it can check for past unauthorized access.
Cybersecurity Incident · EMEA
French National Blood Establishment (EFS) →Cyberattack targeting the French National Blood Establishment (EFS) and linked to three blood storage sites; detected before any damage was done.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Executive Search: EMEA →
Our EMEA practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗